feat: add "typ" (Type) Header Parameter check

[panva]

This PR adds a tick for the capability of a library to check a JWT "typ" (Type) Header Parameter. The current best practice for new JWT profiles is to explicitly type them. A recipient of a given JWT profiled token is then responsible for checking the token's type to be what they expect.

The "typ" check is similar to the existing "value" ones such as "iss" with, except that

• it expects the property in the protected header
• its value is case-insensitive
• it may or may not be prefixed with application/

Example implementation of such check is available here