Migrate IndieAuthOpaqueTokenIntrospector to `WebClient`

Instead of using RestAssured, we can migrate to using a WebClient, as part of #32.

This requires we follow 0 to introduce a mocked server, with the ability to verify our HTTP interactions.

Note that this removes the profile URL slash enhancement, as this should be no longer required.