feat: Recognize workload certificate config in has_default_client_cert_source for mTLS for Agentic Identities #621