Fix Device Code session propagation and OIDC claims

[dairoca90]

Fix Device Code session propagation and OIDC claims

Description

This PR updates the Device Code flow to improve session propagation and OpenID Connect claim handling.

Changes

• Propagated the user Session so it is available in the Access Token Modifier Script. Previously, the session was not exposed to the script.
• Added support for including the acr and amr values in Device Code tokens.
• Updated the Device Code response so that when the openid scope is requested, the OIDC-related information is included when a valid user session exists at the time the Device Code is generated.
• Ensured the session information is preserved throughout the Device Code flow so it can be consumed by downstream token customization logic.

Result

The Device Code flow now provides the necessary session context for token modification and correctly propagates acr and amr authentication information when applicable.