feat: add resources and granular permission groups for reconciliation

[kashif-m]

Type of Change

• Bugfix
• New feature
• Enhancement
• Refactoring
• Dependency updates
• Documentation
• CI/CD

Description

Described in #6524

This PR includes below changes

• Extending resources enum (for specifying the resource being consumed from the dashboard)
• Extending granular permission groups for recon
• Populating acl field in the recon token

Additional Changes

• This PR modifies the API contract
• This PR modifies the database schema
• This PR modifies application configuration/environment variables

Motivation and Context

Helps maintain and configure permissions for recon module granularly.

How did you test it?

• Verify the generated recon token has acl
• GET /verify_token response to have acl

Check /verify_token response

cURL

curl --location --request GET 'http://localhost:8080/recon/verify_token' \
    --header 'Authorization: Bearer eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.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.wvS97F0dXwY7Y5uKSk8PEqHOhoAAPlR0coX_kIGyM2I'

Response

{
    "merchant_id": "merchant_1731996648",
    "user_email": "kashif2@juspay.in",
    "acl": "{\"recon_reports\":\"RW\",\"recon_files\":\"RW\",\"run_recon\":\"RW\",\"recon_and_settlement_analytics\":\"R\",\"recon_token\":\"RW\",\"recon_upload\":\"RW\",\"recon_config\":\"RW\"}"
}

Checklist

• I formatted the code cargo +nightly fmt --all
• I addressed lints thrown by cargo clippy
• I reviewed the submitted code
• I added unit tests for my changes where possible

[semanticdiff-com]

Review changes with  

Changed Files

File	Status
crates/router/src/routes/app.rs	96% smaller
crates/router/src/core/recon.rs	76% smaller
crates/router/src/services/authorization/info.rs	42% smaller
crates/router/src/services/authorization/permission_groups.rs	40% smaller
crates/api_models/src/events/recon.rs	32% smaller
crates/common_enums/src/enums.rs	19% smaller
crates/router/src/services/authorization/roles/predefined_roles.rs	18% smaller
crates/router/src/services/authorization/permissions.rs	16% smaller
crates/router/src/routes/recon.rs	10% smaller
crates/api_models/src/recon.rs	4% smaller
crates/api_models/src/enums.rs	0% smaller
crates/api_models/src/events/user.rs	0% smaller
crates/api_models/src/user.rs	0% smaller
crates/router/src/core/user.rs	0% smaller
crates/router/src/routes/user.rs	0% smaller
crates/router/src/services/authentication.rs	0% smaller
crates/router/src/services/authorization/roles.rs	0% smaller
crates/router/src/services/email/types.rs	0% smaller

[ThisIsMani]

Please remove the new group and Recon parent.

[sahkal]

core part LGTM!

[ThisIsMani]

Let me know once you get approvals from PMs regarding recon groups in roles. I'll approve.

[ThisIsMani]

Other than that, LGTM.

[ThisIsMani]

@kashif-m, can you add view variants as well where we added manage groups in roles. This will maintain consistency with other roles.