feat(oidc): optimize the userinfo endpoint (#7706)

* feat(oidc): optimize the userinfo endpoint

* store project ID in the access token

* query for projectID if not in token

* add scope based tests

* Revert "store project ID in the access token"

This reverts commit 5f0262f23988e7f62d415d0e4a02a705f6ad5197.

* query project role assertion

* use project role assertion setting to return roles

* workaround eventual consistency and handle PAT

* do not append empty project id

internal/query/testdata/oidc_client_no_settings.json

@@ -1,6 +1,7 @@
 {
   "instance_id": "239520764275982338",
   "app_id": "239520764276441090",
+  "state": 1,
   "client_id": "239520764779364354@zitadel",
   "client_secret": null,
   "redirect_uris": [
@@ -23,7 +24,7 @@
   "clock_skew": 0,
   "additional_origins": null,
   "project_id": "239520764276178946",
-  "state": 1,
+  "project_role_assertion": false,
   "project_role_keys": null,
   "public_keys": null,
   "settings": null