add disable_trust_on_first_use to OIDCProvisioner

[siiimooon]

Name of feature:

add disable_trust_on_first_use to OIDCProvisioner

Pain or issue this feature alleviates:

Preparations for smallstep/certificates#2169

Why is this important to the project (if not answered above):

Is there documentation on how to use this feature? If so, where?

In what environments or workflows is this feature supported?

In what environments or workflows is this feature explicitly NOT supported (if any)?

Supporting links/other PRs/issues:

smallstep/certificates#2169

[CLAassistant]

Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.
_{You have signed the CLA already but the status is still pending? Let us recheck it.}