Fixes, Improvements, and ML-DSA support

[panva]

Fixes

• Restores fragment-based decoder links.
• Supports #token, #id_token, #access_token, #value, and legacy #debugger-io?token links.
• Loads fragment-provided PEM or JWK public keys together with the JWT and verifies immediately.
• Prevents issuer/JWKS discovery from replacing an explicitly linked key.
• Preserves invalid linked keys so their validation errors remain visible.
• Keeps URL handling fragment-only; query-string token links are not restored.

Improvements

• Changing the public/private key format now converts the current key between PEM and JWK.
• Failed conversions retain the previous key and selected format.
• Public JWK input is automatically pretty-printed and JSON syntax-highlighted.
• Replaces the deprecated EdDSA dropdown option with Ed25519, while continuing to validate pasted legacy EdDSA tokens.
• Removes unnecessary browser detection for P-521 and Ed25519.
• Removes unsupported Ed448 from the debugger.
• Updates the JOSE implementation to 6.2.5.

New features

• Adds debugger signing and verification support for:
  • ML-DSA-44
  • ML-DSA-65
  • ML-DSA-87
• Adds ML-DSA support indicators to library comparison cards.
• Enables Chrome's Additional WebCrypto Algorithms origin trial on jwt.io to get support for ML-DSA up early.

Fixes: #880
Fixes: #942