Define session transcript for OpenID4VP (without DC API) in OpenID4VP

[TimoGlastra]

There has been a lot of discussions about the session transcript for the DC API, but I couldn't find anything related to the non-dc api.

#374 introduced text that no-dc-api should follow ISO 18013-7. However with the addition of the Session transcript for DC API to OID4VP, and with the PR to define session encryption details (#380) i think it makes sense to also define the session transcript options for OID4VP without dc-api in OID4VP.

Then the specific requirements around encryption algs can be defined in HAIP, and there's no need anymore for ISO 18013-7 when doing OID4VP and mDOC, especially when using DCQL and the PD restrictions don't apply.

[Sakurann]

session transcript for OpenID4VP (without DC API) is currently defined in ISO 18013-7 annex B, which is to be followed for now.
Issue with that Annex is that it relies on Second implementers draft of openid4vp, while the third one has been recently published. there is an agreement between ISO SC17 WG10 and OIDF that OIDF can define mdoc profile for openid4vp without browser api when it decides the time is right. the issue to track that in HAIP is here (openid/oid4vc-haip#139), but i am ok keeping this one as its counterpart in openid4vp repo.