v1.2.0 — remove internal/license verifier (server-side now)
v1.1.0: public jwtverify package + jwks fetch/cache & Verifier (refresh-on-rotation)
Release v1.0.0