Add OAuth2 API scope registration and enforcement

Register v1 API scopes in coredata, advertise them in OIDC discovery
and protected-resource metadata, show them on the consent screen, and
enforce scope-to-action mapping in the IAM Authorizer before policy
evaluation.

Signed-off-by: Ludovic Vielle <ludovic@probo.com>

pkg/server/api/console/v1/resolver.go

@@ -142,7 +142,7 @@ func NewMux(
 	// is fetched server-to-server by public-client providers (PostHog)
 	// during authorization, with no Probo credentials. Mounted outside the
 	// auth group above.
-	r.Get("/connectors/oauth-client-metadata", handleConnectorOAuthClientMetadata(baseURL))
+	r.Get("/connectors/oauth-client-metadata", handleConnectorOAuth2ClientMetadata(baseURL))
 
 	return r
 }