smart OIDC token selection #47
Description
some signers will want Access tokens (by default) but sometimes the ID token might be necessary. either provide a CLI flag to choose the token to submit or look at the controller's external-jwt-signers and use the proper token automatically