v3.20.0

What's Changed

• oidc: modernize with new Go APIs by @ericchiang in #487
• oidc: improve documentation for APIs by @ericchiang in #488
• SECURITY.md: add a security policy and point to project-level reporting by @ericchiang in #489
• oidc: ignore JWKs with unknown signing algorithms rather than failing by @ericchiang in #491
• readme: update README and docs by @ericchiang in #492
• oidc: add API for determining when issuer URLs mismatch by @ericchiang in #493
• oidc: add constants for "email" and "profile" scopes by @ericchiang in #494

Full Changelog: v3.19.0...v3.20.0