Add two options:

• clientScope
• clientAudience

These options will allow passing a custom scope and audience to the token endpoint of the authorization server when using inter-broker authentication or for OAuth over PLAIN with clientId + secret.

Also add audience option to KafkaConnect CR, KafkaBridge CR, KafkaMirrorMaker CR authentication section, where scope is already available, but not used. Propagate both scope and audience to KafkaBridge, KafkaConnect, MirrorMaker pods.