Workload identity federation GA: Eliminate static credentials with OIDC

DRANK

We've added support for Terraform, API, tsnet, Kubernetes, and automatic cloud token exchange.