✨ Support auth scopes declared on the addon CR.

[jortel]

For consideration.

Support auth scopes declared on the addon CR. The scopes included in the addon token are currently hard-coded in hub. The purpose of limiting the addon (role) scopes is safety. Addon's make changes to the inventory grammatically and, as such, are a much higher risk of malicious activity and accidental damage to the inventory at scale.

Pros:

• Not hard coded.
• Declaritive.
• Tailored to each addon's needs.

Cons:

• Addon writer needs to know the scopes.

Example with currently mapped scopes.

auth:
  scopes:
    - applications:get
    - applications:put
    - applications.tags:*
    - applications.facts:*
    - applications.bucket:*
    - applications.analyses:*
    - identities:get
    - identities:decrypt
    - proxies:get
    - settings:get
    - tags:*
    - tagcategories:*
    - tasks:get
    - tasks.report:*
    - tasks.bucket:get
    - files:get
    - files:post
    - files:put
    - files:patch
    - rulesets:get