Bug fix: JWTAuthenticator must reload when spec.audience or spec.claims changes

[cfryanr]

Fixes #2089.

Release note:

Fixes a bug introduce in Pinniped v0.33.0 where changing the `spec.audience` and/or `spec.claims` fields of an existing JWTAuthenticator (without changing any other spec fields) did not take effect until the next time the Concierge pods are restarted, even though those spec changes should take effect immediately.

[netlify]

✅ Deploy Preview for pinniped-dev canceled.

Name	Link
🔨 Latest commit	a7edbd1
🔍 Latest deploy log	https://app.netlify.com/sites/pinniped-dev/deploys/67295a846632eb00085045fe

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 31.27%. Comparing base (587e6fb) to head (a7edbd1).
Report is 5 commits behind head on main.

Additional details and impacted files

@@            Coverage Diff             @@
##             main    #2090      +/-   ##
==========================================
- Coverage   31.27%   31.27%   -0.01%     
==========================================
  Files         371      371              
  Lines       61119    61123       +4     
==========================================
+ Hits        19115    19116       +1     
- Misses      41480    41482       +2     
- Partials      524      525       +1     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.