feat(sidecar): implement token based auth between sidecar and builder to only allow our code to invoke the sidecar api