refactor scopes for cluster services

[aditya-mitra]

Summary

🤖 Generated by Copilot at bfcb829

Improved the security and communication of the cluster services by adjusting the scope and permission hooks for build-status, pods, and api-job. This enables the server to manage the build status and API jobs of the pods without admin rights.

References

refs #9161

Explanation

🤖 Generated by Copilot at bfcb829

• Changed the service hooks for api-job, build-status, and pods to use the server scope instead of the admin scope for external requests (link, link, link). This allows the server to perform various operations on the cluster without requiring admin privileges.

🤖 Generated by Copilot at bfcb829

We're the crew of the api-job ship, we sail the code with skill
We don't need admin scope to do our work, we use the server scope at will
Heave away, me hearties, heave away
We'll hook the build-status and the pods with care, and keep them safe and sound

QA Steps

List any additional steps required to QA the changes of this PR, as well as any supplemental images or videos.

Checklist

• If this PR is still a WIP, convert to a draft
• When this PR is ready, mark it as "Ready for review"
• ensure all checks pass
• Changes have been manually QA'd
• Changes reviewed by at least 2 approved reviewers