refactor: Router scopes and permissions

[cmaddox5]

Summary of changes

Asana Ticket: N/A

This PR represents a suggestion to how permissions are checked in requests. Before, we were using configuration to determine what permission applies to each route. This is easy to miss and I feel could be simplified by managing scopes a bit better in the router.

Tl;dr of changes:

• The Permissions module and Authorize plug have been removed
• New plugs have been created for checking Keycloak roles
• Router scopes have been updated so the appropriate plug runs and authorizes the user
  • If a route can be accessed by anyone logged in through Keycloak, place it here
  • If a route can be accessed by anyone with read-only access or admins, place it here
  • If a route can be accessed only by admins, place it here

I find this easier to follow so wanted to present this as an option and open the topic for discussion.

Reviewer Checklist

• Meets ticket's acceptance criteria
• Any new or changed functions have typespecs
• Tests were added for any new functionality (don't just rely on Codecov)
• This branch was deployed to the staging environment and is currently running with no unexpected increase in warnings, and no errors or crashes.