Disable client client grant for choreo app

[mefarazath]

Noticed that client_secret is added to config.json[1]. I am assuming this would be a dummy value.

In any case, it would be good to disable the client credentials grant type in the app that is used to exchange tokens at choreo sts.

This would potentially remove any possibility of misusing or exploiting the secret value.

Basically by removing credential grant type we make the secret not useful for anything other than token exchange.

[1]

MedicinesforLK/admin-portal/src/config.json

Line 10 in c5ed027

"client_secret": "6SvfTHcnvIS1E52uSEsaxbTH4toa"