Fix security vulnerabilities in JWT packages

Added explicit package references to override vulnerable transitive dependencies:
- Microsoft.IdentityModel.JsonWebTokens: 8.2.1 (fixes GHSA-59j7-ghrg-fj52 / CVE-2024-21319)
- System.IdentityModel.Tokens.Jwt: 8.2.1 (fixes GHSA-59j7-ghrg-fj52 / CVE-2024-21319)

These packages override the vulnerable 7.0.3 versions that were coming from transitive dependencies.

The vulnerability (CVE-2024-21319) is a Denial of Service issue affecting JWT-based authentication tokens, allowing unauthenticated clients to consume excessive server memory.

Author: claude

src/NosCore.ParserInputGenerator.Launcher/NosCore.ParserInputGenerator.Launcher.csproj

@@ -10,6 +10,11 @@
 		<OutputPath>..\..\build\</OutputPath>
 	</PropertyGroup>
 
+	<ItemGroup>
+		<PackageReference Include="Microsoft.IdentityModel.JsonWebTokens" Version="8.2.1" />
+		<PackageReference Include="System.IdentityModel.Tokens.Jwt" Version="8.2.1" />
+	</ItemGroup>
+
 	<ItemGroup>
 		<ProjectReference Include="..\NosCore.ParserInputGenerator\NosCore.ParserInputGenerator.csproj" />
 	</ItemGroup>

src/NosCore.ParserInputGenerator/NosCore.ParserInputGenerator.csproj

@@ -41,10 +41,12 @@
 	<ItemGroup>
 		<PackageReference Include="Microsoft.Extensions.Hosting" Version="10.0.0" />
 		<PackageReference Include="Microsoft.Extensions.Http" Version="10.0.0" />
+		<PackageReference Include="Microsoft.IdentityModel.JsonWebTokens" Version="8.2.1" />
 		<PackageReference Include="NosCore.Shared" Version="5.0.0" />
 		<PackageReference Include="Serilog" Version="4.3.0" />
 		<PackageReference Include="Serilog.Extensions.Hosting" Version="9.0.0" />
 		<PackageReference Include="SharpZipLib" Version="1.4.2" />
+		<PackageReference Include="System.IdentityModel.Tokens.Jwt" Version="8.2.1" />
 	</ItemGroup>
 
 	<ItemGroup>

test/NosCore.ParserInputGenerator.Tests/NosCore.ParserInputGenerator.Tests.csproj

@@ -7,9 +7,11 @@
 	</PropertyGroup>
 
 	<ItemGroup>
+		<PackageReference Include="Microsoft.IdentityModel.JsonWebTokens" Version="8.2.1" />
 		<PackageReference Include="Microsoft.NET.Test.Sdk" Version="18.0.1" />
 		<PackageReference Include="MSTest.TestAdapter" Version="4.0.2" />
 		<PackageReference Include="MSTest.TestFramework" Version="4.0.2" />
+		<PackageReference Include="System.IdentityModel.Tokens.Jwt" Version="8.2.1" />
 		<PackageReference Include="coverlet.collector" Version="6.0.4">
 			<PrivateAssets>all</PrivateAssets>
 			<IncludeAssets>runtime; build; native; contentfiles; analyzers; buildtransitive</IncludeAssets>