We support using workload identity to enable passwordless logins for ACR, ECR and GCR. This is done by fetching an authentication token from the cloud provider. But, this token is not cached, which means we fetch a new token during every reconciliation. We should add a cache for each cloud provider and implement eviction and refreshing logic after the cached token expires.