feat: allow marking OIDC provider-verified addresses as verified during registration

[Saancreed]

Allows identities to skip address verification if Kratos is configured to trust OIDC providers to verify them ahead of time.

Related issue(s)

#3424

Checklist

• I have read the contributing guidelines.
• I have referenced an issue containing the design document if my change
  introduces a new feature.
• I am following the
  contributing code guidelines.
• I have read the security policy.
• I confirm that this pull request does not address a security
  vulnerability. If this pull request addresses a security vulnerability, I
  confirm that I got the approval (please contact
  [email protected]) from the maintainers to push
  the changes.
• I have added tests that prove my fix is effective or that my feature
  works.
• I have added or changed the documentation.

Further Comments

I chose to extend existing default OIDC provider configuration in tests instead of adding a new provider because the result is ignored if the schema doesn't have any verifiable addresses anyway and it was easier to do it this way (or so I believe). If you'd prefer to move the key under which verified_addresses are returned into identity object, like mentioned in linked issue, let me know and I'll change it.

[aeneasr]

ps: I changed the key from verified_addresses to identity.verified_addresses for JsonNet! Since I can't push to your fork, I created a new PR: #3448

[aeneasr]

Docs here: ory/docs#1511