returndiagnostics was not propagated to recreated and reconnected sessions

* an exception in FetchOperationLimits may have skipped applying the configured operation limits on the server

JSON ReadEnumeratedString does not decode the number in e.g. "Red_0".
JSON reencode of JSON content in an extension object runs into an encoder error.

…#2830)

* improve crl handling in certificate stores by not loading CRL with invalid or unsupported content. Hence the revocation check for such certificates may fail.

…ed lower/uppercase letters in the <hostname> of the Uri.(#2837)

Uri.TryCreate lower cases the hostnames. Switch always back to the legacy implementation which maintains the casing.

- Channels are not disposed (client and server)
- During long running tests an HMAC object leak was observed.
- The HMAC and SymmetricSign objects were not disposed after use, leading to a small incremental memory leak per key renewal. 
- The channel token lifetime is calculated by the system clock, which can change. Instead use the continous HiResClock.TickCount to calculate the lifetimes.
- Token renewal and connection requests are not removed from the request dictionary

Improvements:
- Make ChannelToken disposable. Dispose channels.
- Dispose HMAC and SymmetricSign objects after use.
- Use TickCount to calculate key renewal and key expiry.
- Introduce a 5% jitter to the token renewal timer, to avoid token renewal storms.
- Reduce the allocation per use of the HMAC objects by using ReadOnlySpan and avoid MemoryStream.

…el (#2850)

Clients that are failing too often to pass the security validationin a certain interval of time with the Basic128 security profile are now tracked and blocked.

ValidateRolePermissions for MIs montioring the Value of a Node

… user identity to allow validation when no session is present (#2832)

* ValidateRolePermissions for MIs montioring the Value of a Node
* allow validation of user identity also in case of disconnected session

* support .NET 9.0 build
* provide a helper to use the X509CertificateLoader also on older .NET versions