Use cern_upn claim as OKD username

preferred_username not safe as per https://auth.docs.cern.ch/user-documentation/oidc/config/#what-will-be-in-your-tokens