Add warpgate sign-in and host access grants

Central is now an OpenID Connect provider so operators can give time-limited SSH access to region hosts through Warpgate.