Mandate JAR-encoded Request Objects

[paulbastian]

It should be discussed to mandate the JAR-encoded Authorization Request according to RFC9101 and restrict usage of URL- encoded Authorization Request from RFC6749 as

1. they do not offer integrity
2. they do not offer authenticity

Restricting the URL-encoded pattern could result in a significant security improvement.