Performance hardening, benchmark fairness, and release/CI improvements after 0.4.0 review
Production hardening: security, performance, PyJWT parity