[PM-3569] Upgrade to Duende.Identity (#3185)

* Upgrade to Duende.Identity

* Linting

* Get rid of last IdentityServer4 package

* Fix identity test since Duende returns additional configuration

* Use Configure

PostConfigure is ran after ASP.NET's PostConfigure
so ConfigurationManager was already configured and our HttpHandler wasn't
being respected.

* Regenerate lockfiles

* Move to 6.0.4 for patches

* fixes with testing

* Add additional grant type supported in 6.0.4 and beautify

* Lockfile refresh

* Reapply lockfiles

* Apply change to new WebAuthn logic

* When automated merging fails me

---------

Co-authored-by: Justin Baur <19896123+justindbaur@users.noreply.github.com>
Co-authored-by: Kyle Spearrin <kyle.spearrin@gmail.com>

test/Identity.IntegrationTest/openid-configuration.json

@@ -4,6 +4,7 @@
   "authorization_endpoint": "http://localhost:33656/connect/authorize",
   "token_endpoint": "http://localhost:33656/connect/token",
   "device_authorization_endpoint": "http://localhost:33656/connect/deviceauthorization",
+  "backchannel_authentication_endpoint": "http://localhost:33656/connect/ciba",
   "scopes_supported": [
     "api",
     "api.push",
@@ -39,6 +40,7 @@
     "implicit",
     "password",
     "urn:ietf:params:oauth:grant-type:device_code",
+    "urn:openid:params:grant-type:ciba",
     "webauthn"
   ],
   "response_types_supported": [
@@ -58,5 +60,22 @@
   "id_token_signing_alg_values_supported": ["RS256"],
   "subject_types_supported": ["public"],
   "code_challenge_methods_supported": ["plain", "S256"],
-  "request_parameter_supported": true
+  "request_parameter_supported": true,
+  "request_object_signing_alg_values_supported": [
+    "RS256",
+    "RS384",
+    "RS512",
+    "PS256",
+    "PS384",
+    "PS512",
+    "ES256",
+    "ES384",
+    "ES512",
+    "HS256",
+    "HS384",
+    "HS512"
+  ],
+  "authorization_response_iss_parameter_supported": true,
+  "backchannel_token_delivery_modes_supported": ["poll"],
+  "backchannel_user_code_parameter_supported": true
 }