feat: token revocation and OP certification (#2594)

* fix: try using only user session if no user is set (id_token_hint) on prompt none

* fix caos errors As implementation

* implement request mode

* return explicit error on invalid refresh token use

* begin token revocation

* token revocation

* tests

* tests

* cleanup

* set op config

* add revocation endpoint to config

* add revocation endpoint to config

* migration version

* error handling in token revocation

* migration version

* update oidc lib to 1.0.0

internal/api/oidc/auth_request_converter.go

@@ -81,6 +81,10 @@ func (a *AuthRequest) GetResponseType() oidc.ResponseType {
 	return ResponseTypeToOIDC(a.oidc().ResponseType)
 }
 
+func (a *AuthRequest) GetResponseMode() oidc.ResponseMode {
+	return ""
+}
+
 func (a *AuthRequest) GetScopes() []string {
 	return a.oidc().Scopes
 }