ADLSFileIO: support access token authentication via the new adls.token property

[kevinjqliu]

Closes #13818

This PR adds support for passing Microsoft Entra access token to ADLSFileIO using the newly added ADLS_TOKEN property. The access token is used to create a TokenCredential class used to configure the DataLakeFileSystemClientBuilder.

See a similar implementation in apache doris

The token expiration is set for 1 hour for now, which is the default lifetime of an access token. We can make this configurable in the future.

Testing

Built and tested locally with spark

./gradlew -DsparkVersions=3.5 :iceberg-spark:iceberg-spark-runtime-3.5_2.12:jar 

Pass in token string

    .config("spark.sql.catalog.onelake.io-impl", "org.apache.iceberg.azure.adlsv2.ADLSFileIO")
    .config("spark.sql.catalog.onelake.adls.token", token)

[kevinjqliu]

cc @bryanck @mrcnc @NikitaMatskevich since yall have experience working with ADLSFileIO :)

[pvary]

@kevinjqliu: Could we add a test case for the new feature?

[kevinjqliu]

@pvary added! could you take another look?

[pvary]

Merged to main.
Thanks for the PR @kevinjqliu!