[Cognito] Support Authenticated role selection for identity pool

### Describe the feature

We should have method/option for setting the Identity Pool at Authentication providers for 'Choose Role from Token' instead of the default 'Use default role' (as per attached screen shot).


### Use Case

For AWS opensearch, I want to seperate IAM role at `Configure domain level access policy` which includes Dev role and admin Role.
Using AWS congition for opensearch authentication we need to update `Authentication providers` and choose option `Choose Role from Token` for combining Cognito user group. It means If no roles are specified in the token, the role resolution will be invoked. By default, it will fall back to the default role specified for this Identity Pool. You can also choose to DENY the request.

### Proposed Solution

I'm using `@aws-cdk/aws-cognito-identitypool-alpha` and hope this construct supports the feature

### Other Information

_No response_

### Acknowledgements

- [ ] I may be able to implement this feature request
- [ ] This feature might incur a breaking change

### CDK version used

2.34.2

### Environment details (OS name and version, etc.)

Ubuntu 20.04

Start by reading the @aws-cdk/aws-cognito-identitypool-alpha construct and the AWS Identity Pool authentication-provider role settings described in the issue. Trace how the construct currently selects the default role and determine the option needed for choosing a role from the token. Done means the construct can represent that setting for the OpenSearch Cognito use case and its behavior is covered by the relevant tests.

Written by the indexing model from the issue text.