Identity tokens in scheduled jobs, documented

The jobs and identity tokens guides now say that a job's run has RUNTIME_ID_TOKEN_REQUEST_URL and RUNTIME_ID_TOKEN_REQUEST_TOKEN, as any sandbox does, so a job can get a token for AWS, Google Cloud or your own API with no stored key.