New PHP eSign SDK version 10.0.0 released

Raised minimum PHP version: The SDK now requires PHP ~8.2.35, ~8.3.36, ~8.4.27, or >=8.5.12 (previously 7.4) to address security vulnerabilities CVE-2026-109618 and CVE-2026-109619.
Replaced JWT dependency: Switched from adhocore/jwt to firebase/php-jwt (^7.0). Token request method signatures are unchanged.
RSA key requirement: JWT Grant now requires an RSA private key of at least 2048 bits. Shorter keys raise a DomainException.
Fixed: Removed deprecated utf8_decode() calls from Basic authorization headers in token generation methods, which caused deprecation warnings on PHP 8.2+.