feat: OIDC - Fetch JWK from providers

[pablocarle]

Description

This PR implements a mechanism and new properties in OIDC to configure JWK keys location (obtained according to documentation from the authorization server's metadata)

New properties:

• apiml.security.oidc.jwks.uri: URL to the JWK keys endpoint.
• apiml.security.oidc.jwks.refreshInternalHours: hours to refresh the JWK keys.

Type of change

• feat: New feature (non-breaking change which adds functionality)

Checklist:

• My code follows the style guidelines of this project
• PR title conforms to commit message guideline ## Commit Message Structure Guideline
• I have commented my code, particularly in hard-to-understand areas. In JS I did provide JSDoc
• I have made corresponding changes to the documentation
• My changes generate no new warnings
• I have added tests that prove my fix is effective or that my feature works
• New and existing unit tests pass locally with my changes
• The java tests in the area I was working on leverage @nested annotations
• Any dependent changes have been merged and published in downstream modules

[sonarqubecloud]

Kudos, SonarCloud Quality Gate passed!   

0 Bugs
0 Vulnerabilities
0 Security Hotspots
0 Code Smells

92.4% Coverage
0.0% Duplication

The version of Java (11.0.21) you have used to run this analysis is deprecated and we will stop accepting it soon. Please update to at least Java 17.
Read more here