OIDC client credentials grant

Canaille should implement client_credentials grant:

https://docs.authlib.org/en/latest/flask/2/grants.html#client-credentials-grant