Antalya 26.3: ianton-ru-1: combined port of 2 PRs

[zvonand]

Changelog category (leave one):

• New Feature

Changelog entry (a user-readable short description of the changes that goes to CHANGELOG.md):

Add token-based authentication and authorization, including support for EC JWT validation (ES* algorithms).
Add token-based authentication and authorization, including support for EC JWT validation (ES* algorithms) (#1430 by @zvonand, #1596 by @zvonand).

CI/CD Options

Exclude tests:

• Fast test
• Integration Tests
• Stateless tests
• Stateful tests
• Performance tests
• All with ASAN
• All with TSAN
• All with MSAN
• All with UBSAN
• All with Coverage
• All with Aarch64
• All Regression
• Disable CI Cache

Regression jobs to run:

• Fast suites (mostly <1h)
• Aggregate Functions (2h)
• Alter (1.5h)
• Benchmark (30m)
• ClickHouse Keeper (1h)
• Iceberg (2h)
• LDAP (1h)
• Parquet (1.5h)
• RBAC (1.5h)
• SSL Server (1h)
• S3 (2h)
• Tiered Storage (2h)

Combined port of 2 PR(s) (group ianton-ru-1). Cherry-picked from #1430, #1596.

• 26.1 Antalya: Token Authentication and Authorization #1430 — 26.1 Antalya: Token Authentication and Authorization
• Antalya 26.1: Add support for EC JWT validation  #1596 — Antalya 26.1: Add support for EC JWT validation

---

#1430: 26.1 Antalya: Token Authentication and Authorization

Introduce authentication using access tokens.

[github-actions]

Workflow [PR], commit [dee26da]