Workload identity federation released, exchanging identity tokens for short-lived access tokens

Released workload identity federation. Trusted workloads can exchange externally issued identity tokens for short-lived OpenAI access tokens without storing long-lived API keys.