fix: use up-to-date `kid` in JWT header when refreshing #2220

Job	Run time
Run OIDC conformity tests	9m 59s
Generate SDKs	3m 30s
Run HSM tests	8m 55s
Run tests and lints	20m 31s
Run end-to-end tests (memory)	4m 58s
Run end-to-end tests (memory, --jwt)	5m 17s
Run end-to-end tests (postgres)	4m 59s
Run end-to-end tests (postgres, --jwt)	5m 23s
Run end-to-end tests (mysql)	5m 26s
Run end-to-end tests (mysql, --jwt)	5m 10s
Run end-to-end tests (cockroach)	5m 27s
Run end-to-end tests (cockroach, --jwt)	5m 33s
Build CLI docs	59s
Generate changelog	0s
Generate release	0s
Release SDKs	0s
Draft newsletter	0s
Render version schema	0s
Send newsletter	0s
Pending approval Slack notification	0s
	1h 26m 7s

Provide feedback