Check OIDC token also for regular user access.

[Gerrit91]

Actually, we can always check for the OIDC token and not only for SSH keys before granting console access. This enhances security.

However, this is a breaking change as clients now have to present the JWT token that they use for accessing the metal-api.

For machine console access, the client now also needs to present the JWT token used for authentication at the metal-api. Update to the latest version of `metalctl` that implements this new behavior.