Support OIDC `subjects` which reference a GitHub Org and wildcard Repo

OIDC represents a big improvement in terms of security by reducing the risk of leaked credentials, and at [polyseam/cndi](https://github.com/polyseam/cndi) we want to bring that value to our users.

In our integration with [AWS](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_create_for-idp_oidc.html#idp_oidc_Create_GitHub:~:text=repository%20or%20branch%20within%20the%20defined%20GitHub%20organization) we are able to specify a trust policy which grants OIDC access for all repos in a given GitHub Organization using a wildcard pattern.

Creating a new OIDC app registration for every repo is such a manual process that I don't think it is sufficiently easy to adopt, and our users will likely continue to use API credentials instead - unless support for wildcard patterns can be added.