Enforce one-time use for `request_uri` used in OAuth 2.0 Pushed Authorization Requests (PAR). Related gh-1925