[EPIC] Support credential vending in Gravitino

[jerryshao]

Describe the proposal

As a centralized service, Gravitino should provide a mechanism to let third-party applications/service integrate with it to get temporary access to the underlying services, like S3, HDFS, HMS, etc on behalf of their users. the credential vending mechanism is heavily adopted in the cloud service. So Gravitino should provide a similar mehanism.

Task list

• [Subtask] support credential vending framework #4992
• [Subtask] integrate credential vending with IcebergRESTServer #4993
• [Subtask] support S3 token credential provider #4994
• [Subtask] support gcs token provider #5068
• [Subtask] Support credential API for Gravitino server #5619
• [Subtask] supports credential REST endpoint in Gravitino server side #5842
• [Subtask] Support credential vending for fileset catalog #5620
• [Subtask] support credential cache in Gravitino server  #5621
• [Subtask] support credential client in Gravition java client #5622
• [Subtask] support credential python client for Gravitino  #5623
• [Subtask] support ADLS credential provider #5624
• [Subtask] support Aliyun oss credential provider #5625

[lw-yang]

This is the Proposal of the secret management system, which should be related to credentials vending

https://docs.google.com/document/d/1CUUtUXJHU89zbaOUkQRMVTfbAS5qlg_xiz5y6kHd37s/edit

[FANNG1]

based on the design of @lw-yang , proposed a new design https://docs.google.com/document/d/1fovK0ylSmI45ynrCPcnRZqzyPDn7DRNb_ExdbjVPq0k/edit