Support Pub/Sub authenticated push subscriptions

[mplanchant]

Feature description

Add support for authenticated push subscriptions (https://cloud.google.com/pubsub/docs/authenticate-push-subscriptions). At the least, it would be good to have access to the Authorization HTTP header added the the push request. Alternatively, the signature could be validated and the email and audience claims verified against provided configuration.