Support specifying required scopes for endpoint/routes

[alukach]

When setting public/private endpoints, a developer should also be able to specify required scopes for endpoints. The augmented OpenAPI spec should be modified with these scopes (docs)

Middleware affected:

• OpenApiMiddleware
• EnforceAuthMiddleware

[alukach]

While we currently allow EndpointMethods in the following format:

{
    r"^/collections$": [
        "POST",
    ],
    r"^/collections/([^/]+)$": [
        "PUT",
        "PATCH",
        "DELETE",
    ],
    r"^/collections/([^/]+)/items$": [
        "POST",
    ],
    r"^/collections/([^/]+)/items/([^/]+)$": [
        "PUT",
        "PATCH",
        "DELETE",
    ],
    r"^/collections/([^/]+)/bulk_items$": [
        "POST",
    ],
}

I think it would be sensible to provide additional support for the following:

{
    r"^/collections$": [
        ("POST", ["collections:create"]),
    ],
    r"^/collections/([^/]+)$": [
        ("PUT", ["collections:update"]),
        ("PATCH", ["collections:update"]),
        ("DELETE", ["collections:delete"]),
    ],
    r"^/collections/([^/]+)/items$": [
        ("POST", ["items:create"]),
    ],
    r"^/collections/([^/]+)/items/([^/]+)$": [
        ("PUT", ["items:update"]),
        ("PATCH", ["items:update"]),
        ("DELETE", ["items:delete"]),
    ],
    r"^/collections/([^/]+)/bulk_items$": [
        ("POST", ["items:create"]),
    ],
}