fix(auth): handle all PyJWT errors gracefully and enforce link code status checks

core/secrets.py

@@ -45,7 +45,7 @@ def decode_jwt(
 ) -> dict[str, Any] | None:
     try:
         return jwt.decode(token, public_key, algo)
-    except jwt.ExpiredSignatureError:
+    except jwt.exceptions.PyJWTError:
         return