uBix Vault v0.2.0-beta.7

Seventh beta. JWT/OIDC login completes the auth-method set.

Added

• JWT/OIDC auth method — exchange a signed JWT for a token (POST /v1/auth/jwt/login). Signatures verified entirely with the standard library — RS256/384/512 and ES256/384/512 — against static PEM public keys and/or a fetched JWKS (with a refetch-on-miss for key rotation); no new dependency. Configure validation under /v1/auth/jwt/config and define roles under /v1/auth/jwt/role/{name} binding audiences and claims to a policy set and token TTL. Login validates exp/nbf, bound issuer, audiences, and per-claim bindings before issuing.

Pre-release. Not production-hardened; no external security review. For production, use HashiCorp Vault or OpenBao.

See CHANGELOG.md.