ESM/CSJ build & dependency reduction

[lukashroch]

Description

• tsc build process changed to use tsup - ESM/CJS support
• bump eslint config to flat file config (legacy deprecated)
• bump all dependencies -> clean audit with no security issues reported
• swap JWT lib implementation from jsonwebtoken to jose - supports ESM/CJS, treeshakable, wide range of envs and no dependencies (solved Using in Vite/Vue3 App Throws 'Uncaught TypeError: util.inherits is not a function' #15, jsonwebtoken uses jws and other deps which rely on couple of node libs)
• read pkg version directly and use tsup to extract version, which is used as constant in build-file, so fixes NextJS ENOENT: no such file or directory Error when trying to create Client #36
• migrate to pnpm (faster and better deps tree resolution, npm already had some issues... ) and used lib build for example directly
• migrate to vitest

Motivation and Context

• out-of-date both runtime and dev dependencies
• missing support for modern JS/TS stack -> CJS/ESM builds & corresponding types
• attempt to properly fix couple of issues related due to use of tsc only (Using in Vite/Vue3 App Throws 'Uncaught TypeError: util.inherits is not a function' #15, NextJS ENOENT: no such file or directory Error when trying to create Client #36 )

How Has This Been Tested?

• all tests passing
• ESM/CJS types tested/passed with https://arethetypeswrong.github.io

 | "@duosecurity/duo_universal"
node10 | ✅
node16 (from CJS) | ✅ (CJS)
node16 (from ESM) | ✅ (ESM)
bundler | ✅

Types of Changes

• Breaking change (fix or feature that would cause existing functionality to change)

Function client.createAuthUrl('username', 'state') now returns a promise.

// before
const authUrl = client.createAuthUrl('username', 'state');

// after
const authUrl = await client.createAuthUrl('username', 'state');