Extension point for claims

[jglick]

May be desirable to allow this or other plugins to inject additional claims into the token when sensible and available, e.g.:

• the user triggering the build
• the organization, repository, and head name (branch/tag/PR-xxx) of a branch project