Small enhancements to Security components, primarily for local, non-https UAA

[TimHess]

• Allow configuration-binding for MetadataAddress and RequireHttpsMetadata
• Allow more places to set valid audience
  • only set ValidateAudience if one or more audience has been configured (MSFT always runs it if present).
• Provide access to customizing CertificateForwardingOptions

Description

Fix issues identified in SteeltoeOSS/Documentation#403

Quality checklist

• Your code complies with our Coding Style.
• You've updated unit and/or integration tests for your change, where applicable.
• You've updated documentation for your change, where applicable.
  If your change affects other repositories, such as Documentation, Samples and/or MainSite, add linked PRs here.
• There's an open issue for the PR that you are making. If you'd like to propose a new feature or change, please open an issue to discuss the change or find an existing issue.
• You've added required license files and/or file headers (explaining where the code came from with proper attribution), where code is copied from StackOverflow, a blog, or OSS.

[TimHess]

I'm running through this one more time in these repos with the updated UAA from my other PR

• OAuth/OIDC client app
• JWT Auth server app

MigrateApps.zip

I still plan to walk through the mtls bits one more time too (unless you beat me to it), or there's the attached super-complex version that should be a very close match to the docs now.

MigrateApps.zip

[TimHess]

I'm running through this one more time in these repos with the updated UAA from my other PR

• OAuth/OIDC client app
• JWT Auth server app

MigrateApps.zip

I still plan to walk through the mtls bits one more time too (unless you beat me to it), or there's the attached super-complex version that should be a very close match to the docs now.

MigrateApps.zip

MTLS migration

[sonarqubecloud]

Quality Gate passed

Issues
1 New issue
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud