Note worthy changes

• The password2 (password confirmation) field on the set/change/reset password forms now carries autocomplete="new-password", matching password1. This allows browser and password manager "suggest strong password" features to fill both fields as a pair.
• IdP: Added support for Dynamic Client Registration.
• IdP: Added support for client_secret_basic.
• IdP: Added support for Resource Indicators (RFC 8707).
• IdP: The .well-known/openid-configuration endpoint previously derived response_types_supported and grant_types_supported from configured clients. Per RFC 8414, these fields should reflect server capabilities, not the configuration of existing clients. They are now statically derived. Additionally, scopes_supported is now included. Use the new populate_server_metadata() adapter method to customize the metadata.