t1961: Move OIDCFACTAuthorization class into oidc_validation module