Bump github.com/go-jose/go-jose/v3 to address GO-2023-2334

[nywilken]

Packer is not directly vulnerable to this CVE but it is a dependency of the Vault API package which Packer does use.

~>  govulncheck ./...
Scanning your code and 895 packages across 164 dependent modules for known vulnerabilities...

=== Informational ===

Found 1 vulnerability in packages that you import, but there are no call
stacks leading to the use of this vulnerability. You may not need to
take any action. See https://pkg.go.dev/golang.org/x/vuln/cmd/govulncheck
for details.

Vulnerability #1: GO-2023-2334
    Decryption of malicious PBES2 JWE objects can consume unbounded system
    resources
  More info: https://pkg.go.dev/vuln/GO-2023-2334
  Module: github.com/go-jose/go-jose/v3
    Found in: github.com/go-jose/go-jose/v3@v3.0.0
    Fixed in: github.com/go-jose/go-jose/v3@v3.0.1

No vulnerabilities found.

Share feedback at https://go.dev/s/govulncheck-feedback.

[lbajolet-hashicorp]

LGTM!

[github-actions]

I'm going to lock this pull request because it has been closed for 30 days ⏳. This helps our maintainers find and focus on the active issues.
If you have found a problem that seems related to this change, please open a new issue and complete the issue template so we can capture all the details necessary to investigate further.