feat: As a user, I want to set a validation on custom claims in oidc auth, so that I can restrict access to backend based on that rule

### Description

ability to configure openid-connect with something like 
```
claim_validators:
- claim: someclaim
  matches:
  - foo
  - bar
```
that would return 401 if failed to evaluate successfully