Lock down a Go API endpoint with JWT tokens

Adds JWT Bearer token validation and scope checks to a Go HTTP endpoint. Rejects unsigned or expired tokens, verifies permissions, and handles proof-of-possession flows without writing auth logic.

Best for: Go engineers shipping an API that needs stateless auth for mobile or SPA frontends.