Refine Asana OAuth2 scopes → Build driver query URLs with url.URL not concatenation

- Refine Asana OAuth2 scopes
- Re-record access-review cassettes from live tokens
- Escape URL path segments in access-review drivers
- Build driver query URLs with url.URL not concatenation

Signed-off-by: Aurélien Sibiril <81782+aureliensibiril@users.noreply.github.com>

pkg/accessreview/drivers/testdata/gitlab.yaml

@@ -22,12 +22,72 @@ interactions:
         proto_minor: 0
         content_length: -1
         uncompressed: true
-        body: '[{"id":1000001,"username":"jane.doe","name":"Jane Doe","email":"jane@example.com","state":"active","access_level":50},{"id":1000002,"username":"bob.smith","name":"Bob Smith","email":"bob@example.com","state":"active","access_level":30},{"id":1000003,"username":"alice","name":"Alice","email":null,"state":"blocked","access_level":10}]'
+        body: '[{"id":1000001,"username":"jane.doe","public_email":"","name":"Jane Doe","state":"active","locked":false,"avatar_url":"https://gitlab.com/uploads/-/system/user/avatar/1000001/avatar.png","web_url":"https://gitlab.com/jane.doe","access_level":50,"created_at":"2024-01-15T10:00:00.000Z","expires_at":null,"membership_state":"active"}]'
         headers:
+            Cache-Control:
+                - max-age=0, private, must-revalidate
+            Cf-Cache-Status:
+                - MISS
+            Cf-Ray:
+                - 9f89e63e6d2cf0b7-CDG
+            Content-Security-Policy:
+                - default-src 'none'
             Content-Type:
                 - application/json
             Date:
-                - Thu, 01 May 2026 12:00:00 GMT
+                - Fri, 08 May 2026 16:39:15 GMT
+            Etag:
+                - W/"865471874cf5294ecdf14af2b23ad593"
+            Gitlab-Lb:
+                - haproxy-main-51-lb-gprd
+            Gitlab-Sv:
+                - api-gke-us-east1-d
+            Link:
+                - <https://gitlab.com/api/v4/groups/12345/members/all?id=12345&page=1&per_page=100>; rel="first", <https://gitlab.com/api/v4/groups/12345/members/all?id=12345&page=1&per_page=100>; rel="last"
+            Nel:
+                - '{"max_age": 0}'
+            Ratelimit-Limit:
+                - "2000"
+            Ratelimit-Name:
+                - throttle_authenticated_api
+            Ratelimit-Observed:
+                - "2"
+            Ratelimit-Remaining:
+                - "1998"
+            Ratelimit-Reset:
+                - "1778258400"
+            Referrer-Policy:
+                - strict-origin-when-cross-origin
+            Server:
+                - cloudflare
+            Set-Cookie:
+                - _cfuvid=G0At132h1lYNrhp.xWKU3r_wLyN7CyYvvx55kUwOmNA-1778258354.9485164-1.0.1.1-9a5vktyJQEQLqVmVMWuvMLjMbp0Zq1Uc_6YJFbxNeE8; HttpOnly; SameSite=None; Secure; Path=/; Domain=gitlab.com
+            Strict-Transport-Security:
+                - max-age=31536000
+            Vary:
+                - Origin, Accept-Encoding
+            X-Content-Type-Options:
+                - nosniff
+            X-Frame-Options:
+                - SAMEORIGIN
+            X-Gitlab-Meta:
+                - '{"correlation_id":"9f89e63e6d2cf0b7-CDG","version":"1"}'
+            X-Next-Page:
+                - ""
+            X-Page:
+                - "1"
+            X-Per-Page:
+                - "100"
+            X-Prev-Page:
+                - ""
+            X-Request-Id:
+                - 9f89e63e6d2cf0b7-CDG
+            X-Runtime:
+                - "0.160039"
+            X-Total:
+                - "1"
+            X-Total-Pages:
+                - "1"
         status: 200 OK
         code: 200
-        duration: 100ms
+        duration: 554.994208ms