Implement on-behalf-of token exchange for multi-tenant agents with Amazon Bedrock AgentCore Gateway

Amazon Bedrock AgentCore Gateway now supports OAuth 2.0 Token Exchange to enable multi-tenant AI agents to securely propagate user identity when calling downstream APIs. This on-behalf-of token exchange allows fine-grained access control and scalable identity management across tenants, demonstrated by the TravelBot multi-tenant booking assistant example.