Support RFC 9449: OAuth 2.0 Demonstrating Proof of Possession (DPoP)

[michaelrsweet]

Add support for DPoP when doing the device authorization flow:

• [ ] Add DPoP HTTP header support
• [ ] Detect AS metadata for DPoP and use it for the device auth flow
• [ ] Cache DPoP information as needed