JWT-Driven Factory

Migrate the legacy JWT factory route to the current Agno v3 RBAC example.

The v2 cookbook source for this route was replaced in Agno v3.

Use Factory with JWT RBAC for the current verified-claims pattern. The v3 example keeps client input out of authorization decisions and maps rejected factory roles to 403.