Sonar: fix "JWT should be signed and verified" with `jwt-decode-verify`

[drdavella]

We should be able to use the jwt-decode-verify codemod to remediate this sonar rule.

https://rules.sonarsource.com/python/RSPEC-5659/