Abstract out permissions to a separate JSON file

[buidav]

💡 Summary

For regular update and maintenance of ScubaGoggles, the permissions required of the module should be abstracted to a separate file instead of hardcoded within auth.py. This is so scripts or other code utilizing ScubaGoggles can check for permission updates.

Motivation and context

Easier future maintenance of ScubaGoggles permissions for code utilizing ScubaGoggles.

Implementation notes

• Abstract out the OAuth scopes array in auth.py to a permissions JSON file.

Acceptance criteria

• Permissions for ScubaGoggles are abstracted out to some permissions JSON file.