Expose CIMD config in MCPExternalAuthConfig CRD

[amirejaz]

Summary

• Stacked on Wire CIMD config through embedded AS and enable storage decorator #5348. Merge that first.
• Resolves the TODO(cimd) left in PR Wire CIMD config through embedded AS and enable storage decorator #5348: CIMD config is now exposed in the MCPExternalAuthConfig CRD so Kubernetes operators can enable it through a normal VirtualMCPServer manifest instead of writing runconfig.json directly.
• Adds EmbeddedAuthServerCIMDConfig struct to the CRD API with enabled, cacheMaxSize, and cacheFallbackTtl fields, following the same patterns as existing fields (TokenLifespanConfig for durations, kubebuilder markers for validation).
• Wires the new CRD field through BuildAuthServerRunConfig in controllerutil/authserver.go, parsing cacheFallbackTtl from a Go duration string to time.Duration.
• Regenerates zz_generated.deepcopy.go and CRD YAML manifests.

Usage example after this PR:

spec:
  externalAuth:
    type: embeddedAuthServer
    embeddedAuthServer:
      issuer: https://auth.example.com
      upstreamProviders: [...]
      cimd:
        enabled: true
        cacheMaxSize: 256
        cacheFallbackTtl: "5m"

Type of change

• New feature

Test plan

• go test ./cmd/thv-operator/pkg/controllerutil/... — new TestBuildAuthServerRunConfig_CIMD covers nil, disabled, enabled with values, enabled with zero fields, invalid TTL
• go build ./... passes
• task lint-fix clean
• CRD YAML regenerated — cimd block appears in both mcpexternalauthconfigs and virtualmcpservers CRDs

Generated with Claude Code

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 68.78%. Comparing base (76fd736) to head (04ee659).

Additional details and impacted files

@@                    Coverage Diff                     @@
##           cimd-phase2-pr3-wiring    #5384      +/-   ##
==========================================================
- Coverage                   68.78%   68.78%   -0.01%     
==========================================================
  Files                         627      627              
  Lines                       63644    63643       -1     
==========================================================
- Hits                        43780    43778       -2     
- Misses                      16609    16614       +5     
+ Partials                     3255     3251       -4     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.