Add DPoP-Nonce to the nonce endpoint

[paulbastian]

It may be beneficial to optionally return a DPoP-Nonce header along the Nonce Endpoint response, so that the Wallet saves a roundtrip & cryptographic operations to fetch a nonce for DPoP protected access tokens.

[bc-pi]

Seems not unreasonable :)