The keyfunc never validated token.Method against the expected signing
method, enabling JWT algorithm confusion attacks where an attacker
could craft a token using a different algorithm (e.g., HMAC with the
public key as secret) to bypass signature verification.

Now each keyfunc verifies the token's algorithm matches the configured
signing method before returning the verification key.

Fixes: H1 (High)