Update dependency @badgateway/oauth2-client to v3

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
@badgateway/oauth2-client	^2.4.2 -> ^3.0.0

---

Release Notes

badgateway/oauth2-client (@​badgateway/oauth2-client)

v3.3.1

Compare Source

• #​193: Fix race condition when multiple function calls are trying to do
  endpoint discovery. (@​lukybrody)

v3.3.0

Compare Source

• OAuth2 token operations may now return an extraParams property, which is an
  object with all unrecognized properties. Some servers return custom
  properties from OAuth2 responses, and this lets users get access to them.
  (@​ericleib, @​blarralde)
• The OAuth2Token object now has a scope property, containing a list of
  scopes the server returned if the server returned this. (@​ericleib)

v3.2.0

Compare Source

• #​180: The browser build was failing to work for vite and next.js users since
  v3. This was probably due to the switch to ESM. Instead of trying to fix this
  problem in Webpack, this library has switched to vite for the minified
  browser build instead.

v3.1.1

Compare Source

• Ignore auhtentication methods from Discovery document we don't support.

v3.0.0

Compare Source

• Dropped support for Node 14 and 16.
• Full conversion to ESM.
• Support for the OpenID Connect id_token. If a server returns it, we expose it
  as idToken. This is a JWT and would require parsing by a JWT library to get
  access to its information. (@​drev74, @​redguardtoo).
• #​171: client_id and client_secret are now percent-encoded with the most
  strict rules as specified by RFC 6749. We weren't doing any
  percent/urlencoding before. This is a a BC break if your secret used special
  characters, and the server you're talking is not compliant with the OAuth2
  spec itself (@​p2004a, @​panva).
• Migrated the test suite from Mocha and Chai to node:test and node:assert
  (@​Zen-cronic).
• Package now uses 'erasableSyntaxOnly' flag with Typescript, so it can be used
  with node --experimental-strip-types.

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.