Check required claims in OIDC issuer-based resolver

[sberyozkin]

Fixes #46566

This PR updates OIDC issuer based resolver to check the extra required claims if configured, to support cases where multiple tenants have the same issuer but different tenant-specific token verification or key retrieval etc requirements.

I originally planned to do these checks at the tenant resolution time only if more than tenant with the same issuer is configured but it does not really work because the process of the actual token retrieval can vary on per tenant basis.
So I simply added a quick required-claims check which should be enough, with the test updated

[quarkus-bot]

Status for workflow Quarkus CI

This is the status report for running Quarkus CI on commit 2465448.

✅ The latest workflow run for the pull request has completed successfully.

It should be safe to merge provided you have a look at the other checks in the summary.

You can consult the Develocity build scans.

[sberyozkin]

Michal, @michalvavrik, this PR is super simple and since you agreed with the idea in the issue description, I'm going to merge given George's approval. Ping my any time if you'd like to change something

[michalvavrik]

good job

[michalvavrik]

Michal, @michalvavrik, this PR is super simple and since you agreed with the idea in the issue description, I'm going to merge given George's approval. Ping my any time if you'd like to change something

haha, yeah I have extremely little time, but I just reviewed when you merged it :-D

[sberyozkin]

Thanks @michalvavrik

[sberyozkin]

Suggesting a backport given the simplicity of this update, unless there are concerns about it