Add OAuth2 API scope registration and enforcement

Register v1 API scopes in coredata, advertise them in OIDC discovery
and protected-resource metadata, show them on the consent screen, and
enforce scope-to-action mapping in the IAM Authorizer before policy
evaluation.

Signed-off-by: Ludovic Vielle <ludovic@probo.com>

pkg/server/api/console/v1/dataloader/dataloader.go

@@ -41,7 +41,7 @@ type (
 	// batch together.
 	AuthorizeKey struct {
 		ResourceID          gid.GID
-		Action              string
+		Action              iam.Action
 		ResourceAttributes  string
 		DryRun              bool
 		SkipAssumptionCheck bool