oidc: add JSON tags to ProviderConfig

This PR adds JSON tags to allow parsing a ProviderConfig directly from
the OpenID Connect JSON metadata document. Since this is the preferred
workaround for providers that don't support discovery in a
spec-compliant way, such as returning the wrong issuer, or requiring a
URL parameter, make this path easier and add an example to the godoc.

Updates #445
Updates #444
Updates #439
Updates #442
Updates #344
Fixes #290

oidc: ignore cancellation of remote key set context

This has largely caused confusion. Detach the context from its parent
and just use as a bag-of-values for configuration.

update go-jose to v4

The biggest change between v3 and v4 is ParseSigned now requires a set
of allow listed algorithms. go-oidc was already doing this ad-hoc, so
the change is an improvement over the current logic.

build(deps): bump github.com/go-jose/go-jose/v3 from 3.0.0 to 3.0.1

Bumps [github.com/go-jose/go-jose/v3](https://github.com/go-jose/go-jose) from 3.0.0 to 3.0.1.
- [Release notes](https://github.com/go-jose/go-jose/releases)
- [Changelog](https://github.com/go-jose/go-jose/blob/v3/CHANGELOG.md)
- [Commits](go-jose/go-jose@v3.0.0...v3.0.1)

---
updated-dependencies:
- dependency-name: github.com/go-jose/go-jose/v3
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <[email protected]>

support provider device_authorization_endpoint

chore: bump dependencies

oidc algs: added EdDSA as a supported algorithm

Support EdDSA alogrithm for providers.

Bump golang.org/x dependencies

The latest versions simplify the transitive dependency tree (see
kubernetes/kubernetes#113366 for details).

Signed-off-by: Stephen Kitt <[email protected]>

oidc: add Config.InsecureSkipSignatureCheck

Includes a big warning for why this is usually a bad idea.

Fixes #350

*: update go deps to more recent versions