[JWT] Provide JWT credentials on enrollment

Agents will be able to indicate if they support JWT with the HTTP header `X-Elastic-Agent-Accept-Auth: JWT`. If set during enrollment, Fleet Server should provide the agent with JWT tokens instead of generating API keys.

Generation of keys during enrollment should follow the approach implemented in https://github.com/elastic/fleet-server/issues/3289.