add SAN that copies what gha is doing

Signed-off-by: meeech <[email protected]>

Author: meeech

config/identity/config.yaml

@@ -266,7 +266,6 @@ ci-issuer-metadata:
   *circleci-type:
     default-template-values:
       # principal gives priority to the claimed value over the default
-      platform_url: "https://app.circleci.com"
       api_url: "https://circleci.com/api/v2"
       runner_environment: ""
     extension-templates:
@@ -278,3 +277,4 @@ ci-issuer-metadata:
       runner-environment: "runner_environment"
       source-repository-ref: "oidc.circleci.com/vcs-ref"
       source-repository-uri: "oidc.circleci.com/vcs-origin"
+    subject-alternative-name-template: "{{.api_url}}/projects/{{.'oidc.circleci.com/project-id'}}/pipeline-definitions/{{.'oidc.circleci.com/pipeline-definition-id'}}"