spacelift should support OIDC for incoming requests

non-human identities that integrate with spacelift must create api keys, which must be stored someone/managed.

I would much prefer that spacelift is able to support authentication/authorization via OIDC.

Two main use cases that I have in mind:

1. I have a use case where I need one spacelift instance to be able to auth as a role on another instance
2. We are moving orchestration to an external tool that will be called spacelift
3. workerpools should be able to be trusted by spacelift without having to generate an apikey