Feature/configure additional OIDC scopes

[tvanderwal-lmco]

Implements the ability to request additional scopes from the OIDC provider documented in issue 4349

[CLAassistant]

All committers have signed the CLA.

[tvanderwal-lmco]

Outside of the unit tests I did confirm functionality locally by requesting the email scope and using it as the friendly name.

---
listen_address: "0.0.0.0:8000"

database:
  type: "local"
  local:
    path: "~/lakefs/metadata"

logging:
  format: text
  level: DEBUG
  output: "-"

auth:
  encrypt:
    secret_key: "example"
  oidc:
    enabled: true
    client_id: myclient
    client_secret: clientsecret
    callback_base_url: http://localhost:8000
    url: https://oidcprovider
    default_initial_groups: ["Admins"]
    is_default_login: true
    friendly_name_claim_name: email
    additional_scope_claims: 
      - upn
      - email

blockstore:
  type: local
  local:
    path: "~/lakefs/dev/data"

gateways:
  s3:
    region: us-east-1

[arielshaqed]

Thanks!
Running tests and putting some labels on it.

[guy-har]

LGTM
Love the tests
Thank you for this contribution!!

[guy-har]

🙏