Improve compatibility with cloud hosting solution (like Azure) for OpenIdDict certificates support

Is there an existing issue for this?

• I have searched the existing issues

Is your feature request related to a problem? Please describe the problem.

Since the introduction of OpenIdDict, it is not possible to host ABP application out of the box on some hosting providers, including Azure App Services.

The problem comes from the way OpenIdDict handles development certificates, and can be avoided by manually specifying which certificates should be used, instead of using AddDevelopmentEncryptionCertificate and AddDevelopmentSigningCertificate, both of which are used by ABP by default.

Describe the solution you'd like

The solution I'd like to see is an improvement over the existing AddDevelopmentEncryptionAndSigningCertificate option. Instead of just enabling/disabling development certificates, AbpOpenIddictAspNetCoreOptions should also provide tools to use other certificate sources:

• Loading key files based on their thumbprint (useful for loading certificates from certificate stores, typically on Windows hosting scenarios)
• Loading key files based on their physical path (useful on system that do not provide stores like Linux)
• Using ephemeral keys (through OpenIdDict's AddEphemeralEncryptionKey and AddEphemeralSigningKey)

Ideally, these should be made easy to change using IConfiguration, as this is the kind of setting that will typically have to be changed depending on where the app is hosted.

Additional context

I'd be ready to propose an implementation for this feature, if nobody has remarks about the general principles presented in this issue.