Is there a full list of all the OIDC role trust policy condition clauses and how they're composed? For example, the :sub condition clause is mentioned here https://www.pulumi.com/docs/pulumi-cloud/oidc/aws/ but are there other clauses that will be provided by requests from Pulumi Deployments? Maybe the name of repo that it's associated with, some info about what triggered it, anything like that?