* OBO tokens: signing with preserved actor chain requires access token
* go mod updates for authlib
* keep alerting version from main
* fix tests
* make gen-apps
* update ext_jwt for OBO
* remove mention of MT service
* fix go.sum
* rename function for clarity
* add negative tests requested in PR feedback
* pr feedback, explain why TypeAccessPolicy
* set UID for OBO usecase