`com.nimbusds:nimbus-jose-jwt:9.0` introduced breaking changes so let's constrain the version range to `8.+`.