Minor Changes
- d29a8f9: Cache exchanged OIDC tokens in memory, keyed by a hash of the source token, audience, and jti, so repeated exchanges reuse the result instead of calling the token-exchange endpoint every time. Cached tokens are evicted when the API-provided expiry passes, and the cache is bounded with least-recently-used eviction to avoid unbounded growth. Add a
skipCacheoption (surfaced asskipTokenCacheonawsCredentialsProvider) to bypass the cache.jtiand the cache-skip flags are now only accepted alongside anaudience, since they only take effect during a token exchange.