feat(oidc): optimize the userinfo endpoint (#7706)

* feat(oidc): optimize the userinfo endpoint

* store project ID in the access token

* query for projectID if not in token

* add scope based tests

* Revert "store project ID in the access token"

This reverts commit 5f0262f23988e7f62d415d0e4a02a705f6ad5197.

* query project role assertion

* use project role assertion setting to return roles

* workaround eventual consistency and handle PAT

* do not append empty project id

internal/query/userinfo_client_by_id.sql

@@ -0,0 +1,6 @@
+select a.project_id, p.project_role_assertion
+from projections.apps7_oidc_configs c
+join projections.apps7 a on a.id = c.app_id and a.instance_id = c.instance_id
+join projections.projects4 p on p.id = a.project_id and p.instance_id = a.instance_id
+where c.instance_id = $1
+    and c.client_id = $2;