Add migration to update ApiClients with centralized authorization scopes

This migration updates the ScopesJson for the ApiClient with Id 91000000-0000-0000-0000-000000000001 to include additional authorization scopes for improved API access control. The Down method reverts the changes if necessary.

Controllers/ConfigurationValueController.cs

@@ -1,6 +1,8 @@
 using AutoMapper;
+using Microsoft.AspNetCore.Authorization;
 using Microsoft.AspNetCore.Mvc;
 using Microsoft.EntityFrameworkCore;
+using Microsoft.SelfService.Portal.Core.API.Authorization;
 using Microsoft.SelfService.Portal.Core.API.Context;
 using Microsoft.SelfService.Portal.Core.API.Dto.ConfigurationValue.Add;
 using Microsoft.SelfService.Portal.Core.API.Dto.ConfigurationValue.Get;
@@ -11,6 +13,7 @@ namespace Microsoft.SelfService.Portal.Core.API.Controllers
 {
     [Route("api/configuration-values")]
     [ApiController]
+    [Authorize(Policy = ApiPolicies.ConfigurationRead)]
     public class ConfigurationValueController : Controller
     {
         private readonly DataContext _context;
@@ -50,6 +53,7 @@ namespace Microsoft.SelfService.Portal.Core.API.Controllers
         }
 
         [HttpPost]
+        [Authorize(Policy = ApiPolicies.ConfigurationWrite)]
         [ProducesResponseType(200, Type = typeof(Guid))]
         [ProducesResponseType(400)]
         public IActionResult AddConfigurationValue([FromBody] AddConfigurationValueDto configurationValue)
@@ -89,6 +93,7 @@ namespace Microsoft.SelfService.Portal.Core.API.Controllers
         }
 
         [HttpDelete("{id}")]
+        [Authorize(Policy = ApiPolicies.ConfigurationWrite)]
         [ProducesResponseType(204)]
         [ProducesResponseType(404)]
         public IActionResult DeleteConfigurationValue(Guid id)