[JorTurFer]

Description

Fixes #1668

Changes

Read STACKIT_SERVICE_CONNECTION_ID on Azure Pipelines

When running in Azure DevOps with the STACKIT Service Connection, the CLI now passes STACKIT_SERVICE_CONNECTION_ID to oidcadapters.RequestAzureDevOpsOIDCToken, the same way the Terraform provider does. Without this, the CLI and Terraform get OIDC tokens with a different sub when they run in the same pipeline, so the same federated identity provider assertions can't serve both.

This PR doesn't change that mode: the env-based path in AuthenticationConfig is untouched. While testing, we noticed it only works for commands that just call an API. Commands that read the stored session fail when nothing was activated:

Command	Failure
project list (without --parent-id/--member), project create	get email of authenticated user: error getting profile email. email is empty
organization list	the request is sent with an empty member
auth get-access-token, curl, ske kubeconfig login	UserSessionExpired() fails parsing the empty SESSION_EXPIRES_AT_UNIX

Checklist

• Issue was linked above
• Code format was applied: make fmt
• Docs are up-to-date: make generate-docs (will be checked by CI)
• Unit tests got implemented or updated
• Unit tests are passing: make test (will be checked by CI)
• No linter issues: make lint (will be checked by CI)

🤖 Generated with Claude Code