feat: token revocation and OP certification (#2594)

* fix: try using only user session if no user is set (id_token_hint) on prompt none

* fix caos errors As implementation

* implement request mode

* return explicit error on invalid refresh token use

* begin token revocation

* token revocation

* tests

* tests

* cleanup

* set op config

* add revocation endpoint to config

* add revocation endpoint to config

* migration version

* error handling in token revocation

* migration version

* update oidc lib to 1.0.0

internal/user/model/token_view.go

@@ -20,6 +20,7 @@ type TokenView struct {
 	Scopes            []string
 	Sequence          uint64
 	PreferredLanguage string
+	RefreshTokenID    string
 }
 
 type TokenSearchRequest struct {
@@ -36,6 +37,7 @@ const (
 	TokenSearchKeyUnspecified TokenSearchKey = iota
 	TokenSearchKeyTokenID
 	TokenSearchKeyUserID
+	TokenSearchKeyRefreshTokenID
 	TokenSearchKeyApplicationID
 	TokenSearchKeyUserAgentID
 	TokenSearchKeyExpiration