fix(deps): update go-jose to version 4.0.2 to fix vulnerability

[panapol-p]

GO-2024-2631: Decompression bomb vulnerability in github.com/go-jose/go-jose

Cxb6dee8d5-b814, Score: 7.5

The go-jose package is subject to a "billion hashes attack" causing Denial-of-Service (DOS) in versions prior to 3.0.1 when decrypting JWE inputs. This occurs when an attacker can provide a PBES2 encrypted JWE blob with a very large p2c value that, when decrypted, produces a Denial-of-Service (DOS).

Read More: https://devhub.checkmarx.com/cve-details/Cxb6dee8d5-b814?utm_source=jetbrains&utm_medium=referral

[panapol-p]

waiting for next release
ref : #345 (review)