Self-manageable OIDC credentials for approved projects

Let the admin of a approved project create and manage OIDC client credentials for the project and its members.