feat: use new token claim fields

[KevinJoiner]

Update jwt privilege handler to use new claim permissions and asset

[Copilot]

Pull Request Overview

This PR updates the JWT privilege handling system to use new token claim fields from the token-exchange-api. The changes replace the previous privilege token middleware with a new implementation from server-garage that uses updated permission constants.

Key changes:

• Updated JWT middleware to use jwtmiddleware.OneOfPermissions from server-garage package
• Replaced privilege constants with new permission constants from token-exchange-api (e.g., VehicleCommands → PermissionExecuteCommands)
• Updated multiple dependencies including grpc-ecosystem, prometheus, and ethereum libraries to newer versions

Reviewed Changes

Copilot reviewed 2 out of 3 changed files in this pull request and generated no comments.

File	Description
go.mod	Updates dependencies to support new JWT middleware and token claims packages, including server-garage v0.0.7 and token-exchange-api v0.3.7
cmd/devices-api/api.go	Migrates from shared/pkg/middleware/privilegetoken to server-garage jwtmiddleware, updates all route handlers to use new permission constants

---

_{Tip: Customize your code reviews with copilot-instructions.md. Create the file or learn how to get started.}