Hosting changes: refactoring & support no-auth setup scenario

[singhk97]

1. Fix missing RequireAuthorization in CompatBot sample.
2. Refactor service collection setup.
3. Use BotConfig as single source for reading & propagating configuration instead of doing that all over.
4. Move Msal setup logic to separate class
5. Support scenario where auth is not provided. Warning logs will be emitted. Clients will be created without auth. Incomming token validation will use a bypass scheme.

Logs when setting up auth using the different config formats

No credentials setup

Testing with Agents Plaground

edit: it had multiple redundant logs before

Msal Config setup

Core config setup

BF config setup

[rido-min]

from the screenshots, seems we are duplicating the same Warning multiple times. Can we review those logs to have a single entry?

[rido-min]

LGTM, but I'd like to validate in a real environment with UMI and FIC before merging

[rido-min]

we need to clarify where to read the Scope from, seems we are reading from the root, and from the section

[singhk97]

Good catch, in Msal config format scope should be read from the section only.

[singhk97]

from the screenshots, seems we are duplicating the same Warning multiple times. Can we review those logs to have a single entry?

yeah, i will do another pass of refactoring to avoid redundant log statements

[singhk97]

Verified it works with UMI, FIC, and Agents Playground in the no-auth scenario.

[rido-min]

LGTM, the only missing piece is to clarify where to read the scope from, and I'm fine doing it in a next PR