feat: set require_pushed_authorization_requests to false

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <[e-mail]>

src/pds.js

···
       code_challenge_methods_supported: ['S256'],
       token_endpoint_auth_methods_supported: ['none'],
       dpop_signing_alg_values_supported: ['ES256'],
-      require_pushed_authorization_requests: true,
+      require_pushed_authorization_requests: false,
       authorization_response_iss_parameter_supported: true,
       client_id_metadata_document_supported: true,
       protected_resources: [issuer],

test/e2e.test.js

···
       assert.strictEqual(data.jwks_uri, `${BASE}/oauth/jwks`);
       assert.deepStrictEqual(data.scopes_supported, ['atproto']);
       assert.deepStrictEqual(data.dpop_signing_alg_values_supported, ['ES256']);
-      assert.strictEqual(data.require_pushed_authorization_requests, true);
+      assert.strictEqual(data.require_pushed_authorization_requests, false);
       assert.strictEqual(data.client_id_metadata_document_supported, true);
       assert.deepStrictEqual(data.protected_resources, [BASE]);
     });