Add migration to update ApiClients with centralized authorization scopes

This migration updates the ScopesJson for the ApiClient with Id 91000000-0000-0000-0000-000000000001 to include additional authorization scopes for improved API access control. The Down method reverts the changes if necessary.

Controllers/DeploymentArtifactController.cs

@@ -1,6 +1,8 @@
 using AutoMapper;
+using Microsoft.AspNetCore.Authorization;
 using Microsoft.AspNetCore.Mvc;
 using Microsoft.EntityFrameworkCore;
+using Microsoft.SelfService.Portal.Core.API.Authorization;
 using Microsoft.SelfService.Portal.Core.API.Context;
 using Microsoft.SelfService.Portal.Core.API.Dto.DeploymentArtifact.Add;
 using Microsoft.SelfService.Portal.Core.API.Dto.DeploymentArtifact.Get;
@@ -12,6 +14,7 @@ namespace Microsoft.SelfService.Portal.Core.API.Controllers
 {
     [Route("api/deployment-artifacts")]
     [ApiController]
+    [Authorize(Policy = ApiPolicies.DeploymentRead)]
     public class DeploymentArtifactController : Controller
     {
         private readonly DataContext _context;
@@ -60,6 +63,7 @@ namespace Microsoft.SelfService.Portal.Core.API.Controllers
         }
 
         [HttpPost]
+        [Authorize(Policy = ApiPolicies.DeploymentWrite)]
         [ProducesResponseType(200, Type = typeof(Guid))]
         [ProducesResponseType(400)]
         public IActionResult AddDeploymentArtifact([FromBody] AddDeploymentArtifactDto deploymentArtifact)
@@ -120,6 +124,7 @@ namespace Microsoft.SelfService.Portal.Core.API.Controllers
         }
 
         [HttpPost("{id}/stale-check")]
+        [Authorize(Policy = ApiPolicies.DeploymentWrite)]
         [ProducesResponseType(200, Type = typeof(GetDeploymentArtifactDto))]
         [ProducesResponseType(404)]
         public IActionResult CheckDeploymentArtifactStale(Guid id)