OIDC support for CI solutions like GitHub or CircleCI

a CI/CD pipeline needs to access hive and is currently doing so with a Schema Registry token.
Using those tokens can be problematic: one has to manually creates, rotates and eventually deletes those tokens.

Another approach would be to use OIDC. I see that you support [OIDC for humans logins](). But I don't see support for CI solutions like GitHub or CircleCI.

We're using CircleCI that supports OIDC: [https://circleci.com/docs/openid-connect-tokens/]()
In Hive, we would configure which tokens are valid for which subgraph, by checking:

* which issuers are allowed
* the ID of the project - to be mapped with a service in Hive

By doing so, we would not need any Schema Registry tokens.