feat: add list tenants with create/update scopes endpoint

[botanical]

Issue

#521

What?/ Why?

Keycloak Client & Tenant Access Endpoint

• KeycloakPDPClient which contains functions:
  • get_rpt to request the requesting party token from keycloak
  • check_permission which checks to see is a user has a permission granted for a resource and scope
  • get_tenants_with_create_update_access which gets a list of tenants the user has create and update access to
  • base64 padding helper function (this is needed because the decode function requires proper padding or it will raise an error)
  • JWT permission extraction functions
• /auth/tenants/writeable endpoint added to Ingest API
• Ingest API config updated to include resource server client ID and secret env vars

Testing?

• Deployed to dev. Also updated dev ends to have VEDA_RESOURCE_SERVER_CLIENT_ID and VEDA_RESOURCE_SERVER_CLIENT_SECRET
• Deployed to sit as well https://sit.openveda.cloud/api/ingest/docs#/Auth/get_writable_tenant_access_auth_tenants_writable_get

[smohiudd]

@botanical I'm not seeing the /auth/tenants/writeable endpoint in the dev ingest api docs

[smohiudd]

The pattern we've been using is to get the client id and secret from the secret manager. See Sm2a example with ingest api: https://github.com/NASA-IMPACT/veda-data-airflow/blob/dev/dags/veda_data_pipeline/utils/submit_stac.py#L49

So we could supply the secret arn instead.