feat: add azure oidc PKI auth instead of client secret (#9054)

* feat: add azure oidc PKI auth instead of client secret
* add client cert and key as deployment options
* Custom token refresher to handle pki auth

site/src/api/typesGenerated.ts

@@ -616,6 +616,8 @@ export interface OIDCConfig {
   readonly allow_signups: boolean
   readonly client_id: string
   readonly client_secret: string
+  readonly client_key_file: string
+  readonly client_cert_file: string
   // This is likely an enum in an external package ("github.com/coder/coder/cli/clibase.StringArray")
   readonly email_domain: string[]
   readonly issuer_url: string