feat(session): IDP Intent Check API with relation tables (#11820)

# Which Problems Are Solved

As part of #11035 , this PR implements the IDP intent check logic for
session validation

# How the Problems Are Solved

- Inject encryption algorithm for IDP intent tokens at DB initialization
  - Add the IDP intent repository as an invoke option
  - Rework crypto mocks using gomock
  - Implement IDP intent check logic
- minor - DB: expand IDP Intent deletion testing table with a test case
where IDP intent is not found

# Noteworthy

I did not implement `domain.Transactional` given the doubts that
@adlerhurst expressed in https://github.com/zitadel/zitadel/pull/11804 .
So, there is no transaction AT ALL in here because the `Execute()`
method contains one single DB call (Delete) and `Validate()` just does
Get calls.

# Additional Context

This is a cherry-picked PR + minor changes, coming from
https://github.com/zitadel/zitadel/pull/11164
- Relates to #11035
- Depends on https://github.com/zitadel/zitadel/pull/11804

backend/v3/storage/database/repository/idp_intent_test.go

@@ -570,6 +570,11 @@ func TestDeleteIDPIntent(t *testing.T) {
 			),
 			expectedDeletedCount: 2,
 		},
+		{
+			testName:             "when condition matches no record should not delete anything",
+			inputConditions:      idpIntentRepo.PrimaryKeyCondition(instanceID, "not found"),
+			expectedDeletedCount: 0,
+		},
 	}
 
 	for _, tc := range tt {