Minisaml

* Minimum supported lxml version is now 5.0.
* Minimum supported minisignxml version is now 24.6.
* Added support for python 3.12.

* Added support for `saml_endpoint` URLs with a query string in `minisaml.request.get_request_redirect_url` thanks to a
contribution by [thesebas](https://github.com/thesebas).

* **Breaking** `minisaml.response.validate_response` now requires an additional parameter `idp_issuer`.
* **Breaking** Several dependencies had their minimum supported version updated.
* Added `minisaml.response.validate_multi_tenant_response` to make integrating MiniSAML into multi-tenant systems easier
and safer.

* Added `allowed_time_drift` parameter to `minisaml.response.validate_response` to allow for clock inaccuracies when validating SAML responses.
* `minisaml.errors.ResponseExpired` now stores both the observed time and the time limit of the SAML response as attributes on the exception.
* `minisaml.errors.ResponseTooEarly` now stores both the observed time and the time limit of the SAML response as attributes on the exception.
* Added more documentation, changed documentation theme.

* Minimum supported minisignxml version is now 22.4.

* Allow passing multiple certificates to `minisaml.repsonse.validate_response` to allow certificate rollover.
* Added the certificate used in `minisaml.repsonse.validate_response` to the returned `minisaml.repsonse.Response`.
* Minimum supported minisignxml version is now 20.11b0.