External Identity Provider

# External Identity Provider Configure a validator against OIDC clients you create yourself, in any OIDC-compliant identity provider. With `spec.auth.managedKeycloak: false` — the default — you create the OIDC objects yourself and reference them from the `Validator` resource. This works with any OID