Implement the remaining items from docs/next-iteration-plan.md:
- Add POST /introspect endpoint (RFC 7662) with client authentication,
support for access and refresh tokens, and token_type_hint
- Add raw token lookup functions in storage for introspection
- Add revocation_endpoint and introspection_endpoint to discovery metadata
- Create docs/flows.md with end-to-end curl examples for all OIDC flows
- Create scripts/validate-oidc.sh to verify discovery, JWKS, registration,
introspection, and revocation endpoints
- Update docs/oidc-conformance.md to reflect actual implementation status
- Update README.md and CLAUDE.md pending sections to be accurate
https://claude.ai/code/session_01JBxVy75XfwwZB8iBXjTxT3
