Secure GitLab CI/CD workflows using OIDC JWT on a DevSecOps platform