auth: draft jwt support using gapitoken

Fixes #5, modeled after the compute client.