Add required typ values for the client-attestation and client-attestation-pop in line with JWT BCP

[tplooker]

[adeinega]

👍

[c2bo]

I just stumbled over this -> Right now the typ is only shown in Appendix A - we should definitely introduce specific typ values in section 4.2 and 4.3