feat(jans-cedarling): implement CEDARLING_ID_TOKEN_TRUST_MODE

[rmarinn]

Is your feature request related to a problem? Please describe.

The bootstrap property CEDARLING_ID_TOKEN_TRUST_MODE was initially implemented in the jwt module but is no longer possible after #10436. We need to re-implement this feature but in the authz module.

Describe the solution you'd like

Add support for the CEDARLING_ID_TOKEN_TRUST_MODE property in the authz module, with the following configuration:

Strict mode:

• id_token.aud must match the access_token.client_id.
• If a Userinfo token is present:
  • The sub must match the id_token.sub.
  • The aud must match the access_token.client_id.

None mode:

• No additional validations are applied.

Describe alternatives you've considered

No viable alternatives identified. This functionality needs to be implemented in the authz module to restore the intended behavior.

Additional context
N/A