add rotate-on-read option on ldap secrets

[vivekpandeyHashi]

Description

Support for Vault's openldap rotate-on-read feature
Adds a rotate_on_read configuration field to the LDAP secrets engine and static roles, enabling on-demand password rotation at the time of credential read. This complements (not replaces) the existing scheduled rotation mechanism.

[hashicorp-cla-app]

Thank you for your submission! We require that all contributors sign our Contributor License Agreement ("CLA") before we can accept the contribution. Read and sign the agreement

Learn more about why HashiCorp requires a CLA and what the CLA includes

---

Vivek Pandey seems not to be a GitHub user.
You need a GitHub account to be able to sign the CLA.
If you have already a GitHub account, please add the email address used for this commit to your account.

_{Have you signed the CLA already but the status is still pending? Recheck it.}