feat(sdk): add iam workload identity option and Secret.iamToken helper (#1606)