OCI token endpoint (GET)

Authenticates via Basic auth and returns a short-lived JWT for OCI operations. Supports three credential types: - email:api-key-jwt: user authentication via API token - email:bencher_user_xxxxx: user authentication via user API key - project-slug-or-uuid:bencher_run_xxxxx: project key authentication

If no Basic auth credentials are provided, issues a public (anonymous) OCI token.

Accepts multiple scope query parameters (Docker 29+ / containerd sends these).