Update ProtectedResourceMetadata to use IList/ISet instead of List

[halter73]

Unlike most of our other JSON DTOs, we use List<string> instead of something like IList<string> or ISet<string>.

[jayaraman-venkatesan]

@halter73 i think this has been updated and can be closed.