How the avatar advertised by the provider in the OpenID Connect picture claim is made available to Jenkins pages.