benvin/registry-token-oauth-post
master
containerd/buildkit fetch registry tokens with a password or refresh_token grant form; read the credential from it so buildx pushes get a real token.