Creates (once) and caches the most suitable Managed Identity key provider for the current platform. Thread-safe, lock-free (uses CompareExchange).