feat(aws-auth): add workflow_ref claim

[guicaulada]

This is needed by some workflows, for example in case I want to use a reusable workflow I can already use the job_workflow_ref claim, but if I want to also control where the job_workflow_ref is triggered from, for example a specific workflow running when certain tags are pushed, I would need the workflow_ref to the workflow that triggered the job_workflow_ref.

[nafisat2]

Could you also update the README with workflow_ref?

shared-workflows/actions/aws-auth/README.md

Line 42 in aee5ab9

| `pass-claims` | String | `, `-separated list of [GitHub Actions claims](https://docs.github.com/en/actions/deployment/security-hardening-your-deployments/about-security-hardening-with-openid-connect#understanding-the-oidc-token) (session tags) to make available to `role-arn`. Currently supported claims (default): `"repository_owner, repository_name, job_workflow_ref, event_name"` [^2] |