Verify token against cfg at wall-clock time now (unix seconds), drawing JWKS keys from keys. Separated from clock/HTTP so tests can drive it deterministically.
Verify token against cfg at wall-clock time now (unix seconds), drawing JWKS keys from keys. Separated from clock/HTTP so tests can drive it deterministically.