V00.78 opt-in module: OpenID Connect Relying-Party identity on top of the
V00.76 JWT and V00.77 OAuth2 building blocks — discovery, ID-token validation
(nonce / azp / at_hash / auth_time / acr), UserInfo, RP-initiated logout and
claims-to-subject mapping. JDK HttpClient only; the in-tree JSON scanner parses
responses (no JSON library). ID-token validation composes the jCustos-jwt
JwtValidator SPI. Framework-neutral — no Vaadin / REST adapter types.