add roles claim and roles metadata from RP

[dickhardt]

To support IPSIE IL3 https://github.com/openid/ipsie/blob/main/ipsie-levels.md

RP would provide a roles claim that is an array of objects with id and display properties and optional description property.

"roles": [ {
    "id": "123456",
   "display": "administrator",
   "description": "All administrative access to create, read, update, and delete resources"
} ]

OPs could include a roles claim in ID Tokens or activate or maintain commands that would be an array of role identifiers

"roles": ["123456"]