OIDC authentication support

Eliminate the need for long-lived cloud IAM credentials in your Baseten deployments. Supports AWS S3 and ECR, and Google Cloud Storage and Artifact Registry using short-lived tokens scoped to a specific workload. Configure trust policies using flexible subject claim patterns to scope access by org, team, model, environment, or workload type. For more information, see the docs on OpenID Connect (OIDC) authentication.