[azwi] add a way to get token compatible with 3rd party apps

[ArgTang]

Is your feature request related to a problem? Please describe.

We have an application that is consuming different az resources: blobstorage, keyvault, and acr. using the azure sdk this works fine, but its not so easy when we dont use the sdks

The application moves some container images around with a bundled skopeo cli instance. We have not found a way to "translate" workload identity token to a valid acr token.

Describe the solution you'd like
Find a way to get tokens so that tools that dont understand workload identity can still use the identity approach
az-cli can create a token if i am correct, however installing az-cli into an images takes a lot of space ~800mb, which we dont want to do issue here

alt1: azwi cli could get some cmds to get a token to a specific resource
alt2: create docs so we could implement the http requests for tokens ourself

Describe alternatives you've considered

installing az-cli into a image is not feasable becoause if the size of the complete install