Expand method-based ingress control on STAC API to more routes and methods

[j08lue]

Now that we established that method-based ingress control on STAC API works, we need to add more routes and methods.

This is the full list (from this comment):

• https://eoapi.develop.eoepca.org/stac/collections, POST
• https://eoapi.develop.eoepca.org/stac/collections/{collection_id}, PUT, PATCH, DELETE
• https://eoapi.develop.eoepca.org/stac/collections/{collection_id}/items, POST
• https://eoapi.develop.eoepca.org/stac/collections/{collection_id}/items/{item_id}, PUT, PATCH, DELETE
• https://eoapi.develop.eoepca.org/stac/collections/{collection_id}/bulk_items, POST

Acceptance criteria

• All above endpoints on https://eoapi.apx.develop.eoepca.org/stac are protected as shown above

[j08lue]

@w-scho had some clarifying questions to the API endpoint map above #102 (comment):

What should happen to the URIs beneath /stac that are not listed in the ticket (like /stac/search)

All open, please.

For the paths listed in the ticket: what shall happen to the methods not listed there? Should they be rejected, or is it OK to let them through?

Yes, let them through, the API will reject unsupported methods.