Entitlement

• add entitlement for fine-grained authorization for both strategies
• add offline verification for "client ID + secret" strategy
• add online verification with JWKS for "client ID + secret" strategy
• fix user information field handling
• fix scope composing for other apps
• improve docs/example/tests
• refactor a lot
• update Dependencies

Hint: the options/API should be backwards compatible to v2.0.2