fix(DPoP): mark defaulted dpop_jkt parameter as trusted

Author: panva

lib/actions/authorization/process_request_object.js

@@ -285,6 +285,7 @@ export default async function processRequestObject(PARAM_LIST, rejectDupesMiddle
 
  if (pushedRequestObject && ctx.oidc.entities.PushedAuthorizationRequest.dpopJkt) {
  params.dpop_jkt = ctx.oidc.entities.PushedAuthorizationRequest.dpopJkt;
+ ctx.oidc.trusted?.push('dpop_jkt');
  }
 
  return next();