High-level OIDC Provider builder for federated identity in IAM. **Use Cases: ** - GitHub Actions authentication - GitLab CI/CD authentication - Other OIDC-based identity providers **Security Best Practices: ** - Limit client IDs to known applications - Use thumbprints to verify the identity provider's certificate - Apply least-privilege IAM policies to federated roles **Escape Hatch: ** Access the underlying CDK OpenIdConnectProvider via the `Provider` property for advanced scenarios not covered by this builder.