Summary

• backport the high/critical Iron Bank dependency fixes needed on release/2.31
• bump github.com/go-jose/go-jose/v4 to v4.1.4
• bump google.golang.org/grpc to v1.79.3 and github.com/buger/jsonparser to v1.1.2

Context

• main already contains the required fixes, so no main patch PR was needed
• I checked whether the existing main patches could be cherry-picked directly
• grpc and jsonparser have matching commits on main, but the backport branch has drift in the same dependency blocks, so the release-branch patch was applied as the minimal equivalent dependency bump instead of a clean cherry-pick

Validation

• make lint is blocked locally because the installed golangci-lint binary was built with Go 1.24 while this branch targets Go 1.25.8
• go test ./... progresses and then fails in Docker-backed tests because /var/run/docker.sock is unavailable in this environment