Read Federation Policy

Return the exact values a service principal federation policy must pin.

The policy is created in the tenant's Databricks account, and it matches on issuer, subject, and audience. Echoing the values we will actually sign is what keeps the admin from having to reverse-engineer them.