feat (jans-cedarling): Add bootstrap properties for CEDARLING_USER_IDENTIFIER and CEDARLING_WORKLOAD_IDENTIFIER

[nynymike]

Description

The Trusted Issuer Metadata Schema enables the mapping for each token entity. But we need a system-wide way to specify the User and Workload entity ids.

We need two new bootstrap properties:

• CEDARLING_USER_IDENTIFIER : default sub-- uses the specified claim of the id_token or userinfo_token as the Cedar User entity identifier. If none present, ignores token.
• CEDARLING_WORKLOAD_IDENTIFIER : default client_id-- uses the specified claim of the access_token as the Cedar Workcload entity identifier. If none present, ignores token.

---

Identified code changes

• task 1
• task 2
• task 3

---

Test cases and code coverage

• Write unit test to cover added/changed code
• Update integration tests to cover added/changed code

---

Document the changes

• task for updating user guides if needed
• task for updating installation and configuration guides if needed
• task for updating developer documentation if needed
• task for updating technical documentation if needed