[Feature] add HYBRID config of api auth mode to support switch in center (#704)

<!-- Please provide brief information about the PR, what it contains &
its purpose, new behaviors after the change. And let us know here if you
need any help: https://github.com/microsoft/HydraLab/issues/new -->

## Description

<!-- A few words to explain your changes -->

### Linked GitHub issue ID: #  

## Pull Request Checklist
<!-- Put an x in the boxes that apply. This is simply a reminder of what
we are going to look for before merging your code. -->

- [ ] Tests for the changes have been added (for bug fixes / features)
- [ ] Code compiles correctly with all tests are passed.
- [x] I've read the [contributing
guide](https://github.com/microsoft/HydraLab/blob/main/CONTRIBUTING.md#making-changes-to-the-code)
and followed the recommended practices.
- [ ] [Wikis](https://github.com/microsoft/HydraLab/wiki) or
[README](https://github.com/microsoft/HydraLab/blob/main/README.md) have
been reviewed and added / updated if needed (for bug fixes / features)

### Does this introduce a breaking change?
*If this introduces a breaking change for Hydra Lab users, please
describe the impact and migration path.*

- [ ] Yes
- [x] No

## How you tested it
*Please make sure the change is tested, you can test it by adding UTs,
do local test and share the screenshots, etc.*


Please check the type of change your PR introduces:
- [ ] Bugfix
- [x] Feature
- [ ] Technical design
- [ ] Build related changes
- [ ] Refactoring (no functional changes, no api changes)
- [ ] Code style update (formatting, renaming) or Documentation content
changes
- [ ] Other (please describe): 

### Feature UI screenshots or Technical design diagrams
*If this is a relatively large or complex change, kick it off by drawing
the tech design with PlantUML and explaining why you chose the solution
you did and what alternatives you considered, etc...*

Co-authored-by: Le Zhou <zhoule@microsoft.com>

Author: zhou9584

center/src/main/java/com/microsoft/hydralab/center/interceptor/BaseInterceptor.java

@@ -94,7 +94,10 @@ public boolean preHandle(HttpServletRequest request, HttpServletResponse respons
 
             // invoked by agent client
             if (!StringUtils.isEmpty(authorizationToken)) {
-                if ("SECRET".equals(apiAuthMode) && authTokenService.checkAuthToken(authorizationToken)) {
+                if ("HYBRID".equals(apiAuthMode) && (authTokenService.checkAuthToken(authorizationToken) ||
+                        authTokenService.setUserAuthByAppClientToken(authorizationToken))) {
+                    return true;
+                } else if ("SECRET".equals(apiAuthMode) && authTokenService.checkAuthToken(authorizationToken)) {
                     return true;
                 } else if ("TOKEN".equals(apiAuthMode) && authTokenService.setUserAuthByAppClientToken(authorizationToken)) {
                     return true;

center/src/main/resources/application.yml

@@ -84,7 +84,7 @@ app:
     deployment: ${OPENAI_DEPLOYMENT:}
     endpoint: ${OPENAI_ENDPOINT:}
   agent-auth-mode: ${AGENT_AUTH_MODE:SECRET} # options: TOKEN, SECRET
-  api-auth-mode: ${API_AUTH_MODE:SECRET} # options: TOKEN, SECRET
+  api-auth-mode: ${API_AUTH_MODE:SECRET} # options: TOKEN, SECRET, HYBRID
 management:
   endpoints:
     web: