OIDC support for Dependabot and code scanning

GitHub has added OIDC authentication support for Dependabot and code scanning at the organization level, allowing dynamic short-lived credentials from cloud identity providers instead of storing long-lived secrets in repositories. Organization admins can centrally manage private registry access for all repos. Currently supported registries include AWS CodeArtifact, Azure DevOps Artifacts, and JFrog Artifactory, with Cloudsmith and Google Artifact Registry coming within four weeks. The feature is generally available on github.com and will ship in GitHub Enterprise Server 3.22.