security: removed snyk issues involving OIDC

[pacificcode]

removed writing empty req.body to httpWriter in OIDC authentication.
modified ras.GenerateKey to use 2048 bit encryption in cicd-integration/generate_pki.go

[sheldonhull]

• Please add a changie entry of type security that communicates the value of this for those reading release notes on github.
• Change title to security type, not fix.

Mark this done and then I'll get that approved. Cheers!

[codecov]

Codecov Report

Attention: Patch coverage is 0% with 1 line in your changes missing coverage. Please review.

Project coverage is 25.29%. Comparing base (a2521eb) to head (680cf63).
Report is 114 commits behind head on main.

Files	Patch %	Lines
auth/method_oidc.go	0.00%	1 Missing ⚠️

Additional details and impacted files

@@            Coverage Diff             @@
##             main     #167      +/-   ##
==========================================
- Coverage   32.61%   25.29%   -7.32%     
==========================================
  Files          80       79       -1     
  Lines       10855    11088     +233     
==========================================
- Hits         3540     2805     -735     
- Misses       7027     8012     +985     
+ Partials      288      271      -17     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

[sheldonhull]

looks good. minor improvement to wording as this is merged into a final doc and meant for consumers primarily, so I simplified and fixed casing. Thanks @pacificcode!

[sheldonhull]

Snyk check failure is due to vendored code, so upon reimport this will go away, so leaving alone. Request reimport of the repository by the security team to have this go away. Thanks!

[pacificcode]

@sheldonhull Security team? can you be a little more specific or maybe a person to point this re-import to?