DPOP_TOKEN_TYPE

RFC 9449 token type string. Canonical casing — compare via isDPoPTokenType since RFC 6749 §5.1 does not mandate casing; servers may return "dpop", "DPoP", or any variant.