Absolute path to a file containing a JWT to be sent as the client_assertion when authenticating to the token endpoint (RFC 7523), e.g. a Kubernetes projected service account token mounted via workload identity federation. The file is re-read on every token request, so token rotation does not require restarting Jenkins.