feat: public authorization

[v-rocheleau]

This allows bento-public's data catalogue to be optionally auth protected, so that projects and datasets are only shown to authorized users. This is a requirement for the PCGL demo.

• The data catalogue relies on GET <katsu-url>/projects to build the catalogue
• Setting BENTO_KATSU_PROJECTS_LIST_AUTHZ="true" forces authz check on /projects
  • If enabled, users in bento-public need to be logged-in and have the P_VIEW_PROJECTS permission to view the content of the data catalog.
  • If disabled, same behaviour as before

Related PRs:

• bento-lib: adds new permissions
• katsu: include authz checks on endpoints
• authz service: use updated bento-lib permissions
• bento-web: include auth headers for new protected endpoints
• bento-public: include auth headers for new protected endpoints
• beacon: include auth headers for new protected endpoints