feat: new auth architecture

[Ubisoft-potato]

Fixes #919

This PR implements a new authentication architecture in the auth module. This architecture will support the addition of new authentication methods, such as Github, SSO, etc.

Key changes

• add new oauth configuration to support multi authentication method:

  oauth:
    key:
      secret: 
      public:
    google: 
      issuer: https://accounts.google.com
      clientId: bucketeer
      clientSecret:
      redirectUrl:

  google is used to configure for Google Authentication.
• remove issuer cert secret, because we don't need dex anymore.
• parse oauth configuration file, then use the configuration file to create auth service and token verifier
• unify interface for authentication
• add auth_type field in auth proto file to support multi authentication method
• implement Google Authentication in auth service

Minor changes

• update ioutil.ReadFile to os.ReadFile, because ioutil was deprecated since go1.16

---

New authentication workflow

1. Call GetAuthCodeURL to get the Login URL
2. User confirm login then user will be redirected to our redirect_url with code
3. Call ExchangeToken with code to get Bucketeer Token
4. When Bucketeer Token expired, call RefreshTokenRequest with refresh_token to refresh Bucketeer Token

Check the illustration.

---

This pull request primarily introduces changes to improve the OAuth configuration in the Bucketeer backend and batch services. The key changes involve the addition of a new 'provider' field in the service token generation command, removal of the issuer-cert-secret, and restructuring of the OAuth configuration.

Here's a breakdown of the most important changes:

Service Token Generation:

• Makefile: Added a new 'provider' option in the generate-service-token command.
• hack/generate-service-token/command.go: Introduced a new 'provider' field in the command structure and updated the command registration and execution functions to include this new field. [1] [2] [3]

OAuth Configuration:

• manifests/bucketeer/charts/backend/templates/deployment.yaml: Removed the issuer-cert-secret and added a new oauth-config ConfigMap. Also, restructured the environment variables related to OAuth configuration. [1] [2] [3] [4]
• manifests/bucketeer/charts/backend/templates/oauth-configmap.yaml: Created a new ConfigMap for OAuth configuration.
• manifests/bucketeer/charts/backend/values.dev.yaml, manifests/bucketeer/charts/backend/values.yaml: Restructured the OAuth configuration in the values files. [1] [2]

Batch Service OAuth Configuration:

• manifests/bucketeer/charts/batch/templates/deployment.yaml: Added a new oauth-config ConfigMap and updated the environment variables and volume mounts related to OAuth configuration. [1] [2] [3]
• manifests/bucketeer/charts/batch/templates/oauth-configmap.yaml: Created a new ConfigMap for OAuth configuration in the batch service.
• manifests/bucketeer/charts/batch/values.dev.yaml, manifests/bucketeer/charts/batch/values.yaml: Updated the OAuth configuration in the values files for the batch service. [1] [2]

[Ubisoft-potato]

Here is a auth archtechture change illustration:

The Admin Console need to make some changes to support the new auth archtechture:

• We still need to develop a new login page in Admin Console, currently the login page is in dex service.
• The Admin Console redirect url if user not login should change to the new login page.
• The new login page will request to the new Auth API with auth_type parameter
  • GetAuthCodeURL
  • ExchangeToken
  • RefreshToken