Adds client_secret_alg_supported

oada-configuration needs a way to say what type of client secrets signing is allowed.