Update dependency jwt-decode to v4 (#33961)

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [jwt-decode](https://redirect.github.com/auth0/jwt-decode) | dependencies | major | [`^3.1.2` -> `^4.0.0`](https://renovatebot.com/diffs/npm/jwt-decode/3.1.2/4.0.0) |

---

### Release Notes

<details>
<summary>auth0/jwt-decode (jwt-decode)</summary>

### [`v4.0.0`](https://redirect.github.com/auth0/jwt-decode/blob/HEAD/CHANGELOG.md#Version-400)

[Compare Source](https://redirect.github.com/auth0/jwt-decode/compare/v3.1.2...v4.0.0)

[Full Changelog](https://redirect.github.com/auth0/jwt-decode/compare/v3.1.2..v4.0.0)

A new version of the library, including a couple of improvements:

-   No longer include a polyfill for [atob](https://developer.mozilla.org/en-US/docs/Web/API/atob), as this is [supported in all major browsers](https://caniuse.com/?search=atob) (and [node environments > 14](https://developer.mozilla.org/en-US/docs/Web/API/atob#browser_compatibility)).
-   Compile to ES2017, dropping support for anything that does not support ES2017 (which should be very limited [according to caniuse](https://caniuse.com/?search=es2017))
-   Use Node's atob when running on node.
-   Drop support for Node 14 and 16, add support for Node 20.
-   Add support for package.json's `exports` field, for better CJS/ESM support
-   Reorganize build artifacts for better CJS/ESM support (cjs and esm needs to be their own directory with a cjs specific package.json file)
-   Drop manual UMD bundle creation in `index.standalone.ts`, but rely on rollup instead.
-   Infer JwtPayload and JwtHeader default types from the `header` argument by using overloads.

Even though some users might experience breaking changes, mostly because of the `exports` field, the majority should be able to update without making any changes, assuming the SDK is used in environments with support for `atob`.

##### Migration to v4.0.0

The `jwtDecode` function is now no longer the default export, and is instead provided as a named export. Make sure to update your code in places where you are importing this function:

```diff
-import jwtDecode from "jwt-decode";
+import { jwtDecode } from "jwt-decode";
```

</details>

---

### Configuration

📅 **Schedule**: Branch creation - "on the first day of the month" in timezone America/Los_Angeles, Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate).

GitOrigin-RevId: 89d0bca50689b86b03d5165650d13bb563800604

Author: convex-renovate-runner[bot]

npm-packages/common/config/rush/pnpm-lock.yaml

@@ -1,5 +1,5 @@
 // DO NOT MODIFY THIS FILE MANUALLY BUT DO COMMIT IT. It is generated and used by Rush.
 {
   "preferredVersionsHash": "a61b386e423d46db4e8b0b295fc5800d5535160e",
-  "packageJsonInjectedDependenciesHash": "c00156fffc55a27cf54a75724df11c5982447883"
+  "packageJsonInjectedDependenciesHash": "c6b29884c4e656d18659d620bb7b7a7953268bdb"
 }

npm-packages/common/config/rush/repo-state.json

@@ -234,7 +234,7 @@
   ],
   "dependencies": {
     "esbuild": "0.25.1",
-    "jwt-decode": "^3.1.2",
+    "jwt-decode": "^4.0.0",
     "prettier": "3.5.1"
   },
   "peerDependencies": {

npm-packages/convex/package.json

@@ -1,7 +1,7 @@
 import { Logger } from "../logging.js";
 import { LocalSyncState } from "./local_state.js";
 import { AuthError, IdentityVersion, Transition } from "./protocol.js";
-import jwtDecode from "jwt-decode";
+import { jwtDecode } from "jwt-decode";
 
 // setTimout uses 32 bit integer, so it can only
 // schedule about 24 days in the future.