v2.16.0

• supported PKCE code challenge methods are now configurable, use to i.e. disable plain for stricter OIDC profiles and new deployments where legacy clients without S256 support aren't to be expected.
• added configuration validations for subjectTypes and pkce supportedMethods