fix(deps): update jwt and oauth2 dependencies for 3.3.x

[fcjack]

What this PR does / why we need it:

We have a critical CVE out of SLO that is related with golang.org/x/oauth2/jws and 2 high CVE both releated with github.com/golang-jwt/jwt/v4 and github.com/golang-jwt/jwt/v5.

Should work on update the dependencies and close the CVEs.

Which issue(s) this PR fixes:
Fixes https://github.com/grafana/loki-private/issues/1517

Special notes for your reviewer:

Checklist

• Reviewed the CONTRIBUTING.md guide (required)
• Documentation added
• Tests updated
• Title matches the required conventional commits format, see here
  • Note that Promtail is considered to be feature complete, and future development for logs collection will be in Grafana Alloy. As such, feat PRs are unlikely to be accepted unless a case can be made for the feature actually being a bug fix to existing behavior.
• Changes that require user attention or interaction to upgrade are documented in docs/sources/setup/upgrade/_index.md
• If the change is deprecating or removing a configuration option, update the deprecated-config.yaml and deleted-config.yaml files respectively in the tools/deprecated-config-checker directory. Example PR