Support project listing for a device being accessed over a tunnel

[Steve-Mcl]

closes #2228

Description

• Update pre-handler in packages/flowforge/forge/routes/api/team.js to allow a device with token to pass to the routes
• Update IMPLICIT_TOKEN_SCOPES.devices in packages/flowforge/forge/routes/auth/permissions.js to permit the permission 'team:projects:list'
• Add context to the @depreciated comment on route /api/v1/teams/:teamId/projects
• Adds tests:
  Team API
  Get list of a teams projects
  ✔ Device can get a list of team projects
  ✔ Device can not get a list of team projects without a valid token
  ✔ Device can not get a list of team projects for a different team

Related Issue(s)

#2228

Checklist

• I have read the contribution guidelines
• Suitable unit/system level tests have been added and they pass
• Documentation has been updated
  • Upgrade instructions
  • Configuration details
  • Concepts
• Changes flowforge.yml?
  • Issue/PR raised on flowforge/helm to update ConfigMap Template
  • Issue/PR raised on flowforge/CloudProject to update values for Staging/Production

Labels

• Backport needed? -> add the backport label
• Includes a DB migration? -> add the area:migration label

[knolleary]

One comment to fix - proposed change included.