feat: Add Kubernetes authentication

This commit adds a new authentication system to the Llama Stack server
with support for Kubernetes and custom authentication providers. Key
changes include:

- Implemented KubernetesAuthProvider for validating Kubernetes service
  account tokens
- Implemented CustomAuthProvider for validating tokens against external
  endpoints - this is the same code that was already present.
- Added test for Kubernetes
- Updated server configuration to support authentication settings
- Added documentation for authentication configuration and usage

The authentication system supports:
- Bearer token validation
- Kubernetes service account token validation
- Custom authentication endpoints

Signed-off-by: Sébastien Han <seb@redhat.com>

pyproject.toml

@@ -39,6 +39,7 @@ dependencies = [
     "tiktoken",
     "pillow",
     "h11>=0.16.0",
+    "kubernetes",
 ]
 
 [project.optional-dependencies]
@@ -48,7 +49,7 @@ dev = [
     "pytest-cov",
     "pytest-html",
     "pytest-json-report",
-    "nbval",            # For notebook testing
+    "nbval",              # For notebook testing
     "black",
     "ruff",
     "types-requests",
@@ -56,7 +57,7 @@ dev = [
     "pre-commit",
     "uvicorn",
     "fastapi",
-    "ruamel.yaml",      # needed for openapi generator
+    "ruamel.yaml",        # needed for openapi generator
 ]
 # These are the dependencies required for running unit tests.
 unit = [
@@ -67,7 +68,7 @@ unit = [
     "pypdf",
     "chardet",
     "qdrant-client",
-    "opentelemetry-exporter-otlp-proto-http"
+    "opentelemetry-exporter-otlp-proto-http",
 ]
 # These are the core dependencies required for running integration tests. They are shared across all
 # providers. If a provider requires additional dependencies, please add them to your environment