Add dashboard-only team role

[knolleary]

Closes #1924

Description

This adds a new 'dashboard' team role that gives a user access to the http endpoints (including dashboard) of the team's node-red instances, but no access to the FF team settings or the editor.

This requires the 'FlowForge Authentication' option to be enabled in the Instance settings.

It also requires nr-launcher to have some changes applied:

• Change oauth scope for httpNode middleware requests nr-launcher#132

When a Dashboard user views the team they are shown this:

The dashboard role has been added to the list of options in the 'change role' and 'invite member' dialogs:

If a dashboard-only user attempts to access the editor they see this error. This isn't the prettiest, but our options are somewhat limited here as we have to avoid sending them into an infinite redirect loop as Node-RED tries to get them logged in. We will be able to improve this in a future NR release to better handle auth failures when autoLogin is enabled.

Remaining Tasks

• New 'empty state' image for when a dashboard-only user attempts to access the team #2293
• Raise upstream issue on Node-RED login loops with autoLogin enabled

Checklist

• I have read the contribution guidelines
• Suitable unit/system level tests have been added and they pass
• Documentation has been updated
  • Upgrade instructions
  • Configuration details
  • Concepts
• Changes flowforge.yml?
  • Issue/PR raised on flowforge/helm to update ConfigMap Template
  • Issue/PR raised on flowforge/CloudProject to update values for Staging/Production

Labels

• Backport needed? -> add the backport label
• Includes a DB migration? -> add the area:migration label

[Pezmc]

I've given this a first pass and nothing stood out, but I'll look at it with fresh eyes tomorrow!

[Pezmc]

I'd be tempted to extract this regex to something like the below to make it clearer what the test is checking for!

Edit: Perhaps one for both isEditor and isHttp/Node?

const isNodeReadHeaderRegex = `/^(editor($|-))|httpAuth-/`

[Pezmc]

I'm not super familar with this area, but I've now been over it twice and checked out the tests locally and the changes seem sensible! 👍

I won't merge in case you want second eyes