/api/v1/sso: access cutouts

[JulienPeloton]

Currently, one can only download all cutouts for an object if the object is static (/api/v1/objects or /api/v1/cutout). Ideally one should be able also to download all cutouts for a moving object (/api/v1/sso).

Remarks:

• One could just loop over objectId, but as several SSO alerts can share the same objectId (typically if the detections are done within less than 30 min), one has to use the candid as well.
• only the science or the difference stamp makes sense? or both?
• this should be a new argument in the /api/v1/sso endpoint (and not in /api/v1/cutout)