Onboarding Provider POC using Shortlived token

[GenosseOtt]

Description
As a platform owner I want to orchestrate any resource I can orchestrate in the Onboarding API
namely:

• API specific Project, WS, MCP,
• Kubernetes generic: ServiceAccount, Secrets [out of scope]

Authentication (Quick'n'dirty)

• End user creates ServiceAccount + Token on Onboarding API (yes this is short-lived for now only and not prod-suitable - temporary solution only)
• ProviderConfig consumes ServiceAccount + Token

Done Criteria

• ProviderConfig CRD exists
• Workspace and ManagedControlPlane CRDs exists
• Stretch: Project, ServiceAccount, Secrets can be orchestrated via Provider on Onboarding API
• Demo: Order an MCP from another MCP (yes the token must be fresh from oven and is doomed to expire quickly)