[EKS] [Auto Mode ALB OIDC]: Allow OIDC authentication via EKS Auto Mode Ingresses

### Community Note

* Please vote on this issue by adding a 👍 [reaction](https://blog.github.com/2016-03-10-add-reactions-to-pull-requests-issues-and-comments/) to the original issue to help the community and maintainers prioritize this request
* Please do not leave "+1" or "me too" comments, they generate extra noise for issue followers and do not help prioritize the request
* If you are interested in working on this issue or have submitted a pull request, please leave a comment

**Tell us about your request**
To allow for a successful migration from AWS Load Balancer Controller, we should be able to use the auth annotations to specify authentication on specific ingresses in Auto Mode.

**Which service(s) is this request for?**
EKS Auto Mode

**Tell us about the problem you're trying to solve. What are you trying to do, and why is it hard?**
We are trying to put authentication on certain endpoints in our cluster, based on host rules in the application load balancer, that is managed by AWS Auto Mode via an ingress class. Following the documentation from AWS LBC, we're able to get most of the way in terms of adding the annotations however then EKS is not able to create the alb due to the following issue :

```
Failed build model due to ingress: monitoring/: secrets "oidc" is forbidden: User "arn:aws:sts:::assumed-role/AWSServiceRoleForAmazonEKS/" cannot get resource "secrets" in API group "" in the namespace "monitoring"
```

All I believe would be needed for this feature is to add a secrets policy (something like AdminView, although that might be too permissive) to the AWSServiceRoleForAmazonEKS (as we are unable to do that ourselves) so that Auto Mode can build the ingress model and apply the correct configuration to the ALB.

**Are you currently working around this issue?**
Currently it is not working, looking at having something else perform the auth behind the ALB if we can't get the alb to work

Start with EKS Auto Mode ingress behavior and the AWS Load Balancer Controller auth annotations described in the issue. No repository files or tests are identified, so first determine where Auto Mode handles OIDC secret access and its AWSServiceRoleForAmazonEKS permissions. Done means an Auto Mode ingress can create an ALB with OIDC authentication without the forbidden secrets error.

Written by the indexing model from the issue text.