Zoekt: Webserver mode - start enforcing JWT if -secret_path is set

Background

We've performed some steps to send and verify JWT tokens in &17500 (closed)

Proposal

As part of this issue, we should start enforcing JWT from the monolith