[ABCA] Implement Replay Attack Protection

[Awambeng]

Description

This is a proxy of:

• [ABCA] Implement Replay Attack Protection keycloak/keycloak#44770

Add replay protection required by spec to prevent reuse of PoP JWTs or challenges.

Potential considerations

• Implement jti tracking for PoP JWTs using a sliding window
• Ensure jti cannot be reused for the same client instance
• Implement efficient storage (map, LRU, or Trie/Patricia Trie if justified)
• Detect challenge reuse
• Enforce expiration of replay entries
• Integrate verification into authenticator + challenge endpoint

estimated time: 3–4 days