[Improve][Manager] OpenAPI authentication should not be mandatory

[woofyzhao]

Description

The open api authentication better have an option to be turned on or off.
For example when the manager and its clients (agent etc.) are all in the same intranet, there might be no need to do authentication.
Also the default secret key is not safe to be kept in config, so we decided to turn it off be default. User who needs to do open api authentication should configure the secretID and secretKey manually.
The related documentation will follow up soon.

InLong Component

InLong Manager

Are you willing to submit PR?

• Yes, I am willing to submit a PR!

Code of Conduct

• I agree to follow this project's Code of Conduct