Update OrchardCore.OpenId to explicitly reference Microsoft.IdentityModel.Protocols.OpenIdConnect

[kevinchalet]

The OpenID module uses both the MSFT OIDC handler and OpenIddict and both projects depend on IdentityModel. Unfortunately, while OpenIddict references a recent version (7.5.1), the MSFT OIDC handler package still references an old version (7.1.2):

Having mismatched versions of the System.IdentityModel.* or Microsoft.IdentityModel.* packages is explicitly NOT supported by the Wilson team and has recently caused a lot of pain due to very-hard-to-find bugs:

• [Bug] AspNetCore 7.0 WebApi Authentication Fails (JWT) - Missing Method AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet#2059
• Breaking changes introduced from Microsoft.IdentityModel.JsonWebTokens 7.3.1 to 7.4.0  AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet#2514

This PR fixes that by explicitly referencing Microsoft.IdentityModel.Protocols.OpenIdConnect to ensure it uses the same IdentityModel version as OpenIddict:

(I strongly recommend including this change in 2.0, hence the explicit 2.0 milestone 🤣)

[Piedone]

Thanks for the explanation :).

[kevinchalet]

Thanks for the review, @Piedone!