I’ve set up a managed identity that has 4 federated credentials for the https://api.pulumi.com/oidc issuer, along with subject identifiers such as : pulumideployorgeffectiveflowprojectvpn gwstackdevoperationupdatescope:write - but when I run the deployment for “update”, while the app builds - when it comes to do stuff in azure, I see this in the logs: error: OIDC authentication was requested via useOidc/ARM_USE_OIDC but no token and/or any idea how I might discover whats wrong with the configuration?

do the deployment logs include "configured Azure credentials" anywhere?