This is to investigate a new pattern leveraging cluster-proxy and managed-serviceaccount to provide a more secure and scalable mechanism to access managedcluster by user and controller on the hub. e.g. The controller on the hub can use its sa on hub to access managed cluster with a sa token projection mechanism.

Related customer requirement: https://redhat-internal.slack.com/archives/C01CB1GHGF8/p1743508903008819