Add resourcealias application service

Introduce a standalone resourcealias package with its own service,
IAM policies, and OAuth2 scopes so alias management no longer lives
inside the trust center services. Remove the trust-center-specific
alias services from probo and trust, and wire the new service into
probod, the server, and the API layer.

Signed-off-by: Bryan Frimin <bryan@probo.com>

pkg/trust/service.go

@@ -31,6 +31,7 @@ import (
 	"go.probo.inc/probo/pkg/html2pdf"
 	"go.probo.inc/probo/pkg/iam"
 	"go.probo.inc/probo/pkg/probo"
+	"go.probo.inc/probo/pkg/resourcealias"
 	"go.probo.inc/probo/pkg/slack"
 )
 
@@ -62,7 +63,7 @@ type (
 		Reports                *ReportService
 		Organizations          *OrganizationService
 		ComplianceExternalURLs *ComplianceExternalURLService
-		TrustCenterAliases     *TrustCenterAliasService
+		resourceAlias          *resourcealias.Service
 	}
 )
 
@@ -78,6 +79,7 @@ func NewService(
 	fileManagerService *filemanager.Service,
 	logger *log.Logger,
 	slack *slack.Service,
+	resourceAliasSvc *resourcealias.Service,
 ) *Service {
 	svc := &Service{
 		pg:                 pgClient,
@@ -91,6 +93,7 @@ func NewService(
 		fileManager:        fileManagerService,
 		logger:             logger,
 		slack:              slack,
+		resourceAlias:      resourceAliasSvc,
 	}
 	svc.TrustCenters = &TrustCenterService{svc: svc}
 	svc.Documents = &DocumentService{svc: svc, html2pdfConverter: html2pdfConverter}
@@ -104,7 +107,6 @@ func NewService(
 	svc.Reports = &ReportService{svc: svc}
 	svc.Organizations = &OrganizationService{svc: svc}
 	svc.ComplianceExternalURLs = &ComplianceExternalURLService{svc: svc}
-	svc.TrustCenterAliases = &TrustCenterAliasService{svc: svc}
 
 	return svc
 }