Comparing Cloud Workload Identity StandardCross-walk between SPIFFE/SPIRE, OIDC Federation, and Sigstore mapped to Azure, AWS, and GCP identity patterns.s