Support RFC 9449: OAuth 2.0 Demonstrating Proof of Possession (DPoP)

[michaelrsweet]

Add support for RFC 9449 DPoP when doing the device authorization flow:

• Add DPoP HTTP header support
• Detect AS metadata for DPoP and use it for the device auth flow
• Cache DPoP information as needed