* Refactor: remove kubeconfig.OIDCConfig for single responsibility * fixup: add comments and rename methods * fixup: fix methods name * fixup: replace GetX509OrNil with SetRootCAs
* Add setup command * Refactor: extract IDTokenSubject instead of sub claims