feat: reject token if it's not valid

package.json

@@ -24,8 +24,10 @@
     "drizzle-orm": "^0.31.2",
     "gql.tada": "^1.7.5",
     "graphql-request": "^7.0.1",
-    "gtoken": "^7.1.0",
     "hono": "^4.3.6",
+    "jose": "^5.4.0",
+    "lodash.mapkeys": "^4.6.0",
+    "luxon": "^3.4.4",
     "zod": "^3.23.8"
   },
   "devDependencies": {
@@ -33,11 +35,12 @@
     "@cloudflare/workers-types": "^4.20240403.0",
     "@trivago/prettier-plugin-sort-imports": "^4.3.0",
     "@types/bun": "^1.1.2",
+    "@types/lodash.mapkeys": "^4.6.9",
     "@types/luxon": "^3.4.2",
     "drizzle-kit": "^0.22.6",
+    "gtoken": "^7.1.0",
     "husky": "^9.0.11",
     "lint-staged": "^15.2.7",
-    "luxon": "^3.4.4",
     "msw": "^2.3.0",
     "prettier": "^3.2.5",
     "prettier-plugin-toml": "^2.0.1",