Unblock Dependabot security updates by moving leafs/auth to JWT 7-compatible release

[Copilot]

Dependabot’s security update job for firebase/php-jwt failed with security_update_not_possible because the dependency graph could only resolve 6.x, while the first non-vulnerable line is 7.0.0+. This change updates the project constraints so Dependabot can resolve and propose secure JWT upgrades.

• Root cause addressed

  • leafs/auth v3.4 (selected by *) constrained firebase/php-jwt to ^6.10, preventing a security upgrade to 7.x.

• Dependency constraint changes

  • Pinned leafs/auth in composer.json from wildcard to a JWT 7-compatible major:
    • leafs/auth: "^5.0"

• Lockfile resolution updates

  • Regenerated lockfile to reflect the new constraint:
    • leafs/auth v3.4 → v5.0
    • firebase/php-jwt v6.10.2 → v7.0.5
    • Required transitive package updates to satisfy the new graph

// composer.json
"require": {
  "leafs/auth": "^5.0"
}