“And Jesus and Paul say otherwise.”
No, not even once. Jesus points out that we need to obey His Father’s commands, for instance. Paul emphasizes “obedience of faith”. What Protestants get wrong - according to an ever growing number of Protestants even - is that Luther misread what Paul said about works (the Jewish ceremonial law) and applied it to all “works”. This movement is called the New Perspective on Paul. It’s still not completely right, but it’s a step toward truth after more than 400 years of Protestant error.
“So who’s right?”
Jesus, Paul - and the Church.
I'll go with Jesus alone.
John 6:28 Then said they unto him, What shall we do, that we might work the works of God? 29 Jesus answered and said unto them, This is the work of God, that ye believe on him whom he hath sent.