feat: token revocation and OP certification (#2594)

* fix: try using only user session if no user is set (id_token_hint) on prompt none

* fix caos errors As implementation

* implement request mode

* return explicit error on invalid refresh token use

* begin token revocation

* token revocation

* tests

* tests

* cleanup

* set op config

* add revocation endpoint to config

* add revocation endpoint to config

* migration version

* error handling in token revocation

* migration version

* update oidc lib to 1.0.0

internal/domain/token.go

@@ -1,9 +1,10 @@
 package domain
 
 import (
-	es_models "github.com/caos/zitadel/internal/eventstore/v1/models"
 	"strings"
 	"time"
+
+	es_models "github.com/caos/zitadel/internal/eventstore/v1/models"
 )
 
 type Token struct {
@@ -12,6 +13,7 @@ type Token struct {
 	TokenID           string
 	ApplicationID     string
 	UserAgentID       string
+	RefreshTokenID    string
 	Audience          []string
 	Expiration        time.Time
 	Scopes            []string