Support certificate authentication

[BrandonStudio]

Goals

1. Support certificate authentication as an alternative of client secret authentication

Non-Goals

No response

Background

#7011

Proposal

If only Microsoft Entra ID uses certificate, just add an alternative config class such as MicrosoftEntraIDAuthUserConfig, extending OAuthUserConfig, otherwise, add optional certificate parameter to the base class.