allow bypassing credential in access token check

[davidzhao]

for certain use cases (SIP server creating dispatch), it's desirable to issue tokens containing credentials so features like auto-egress could continue to function

[changeset-bot]

🦋 Changeset detected

Latest commit: b19780c

The changes in this PR will be included in the next version bump.

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

💥 An error occurred when fetching the changed packages and changesets in this PR

Some errors occurred when validating the changesets config:
The package or glob expression "github.com/livekit/protocol" specified in the `fixed` option does not match any package in the project. You may have misspelled the package name or provided an invalid glob expression. Note that glob expressions must be defined according to https://www.npmjs.com/package/micromatch.