Abstract out permissions to scuba_constants.py

[buidav]

💡 Summary

For regular update and maintenance of ScubaGoggles, the permissions required of the module should be abstracted to a separate file instead of hardcoded within auth.py. This is so scripts or other code utilizing ScubaGoggles can check for permission updates.

Motivation and context

Easier future maintenance of ScubaGoggles permissions for code utilizing ScubaGoggles.

Implementation notes

• Abstract out the OAuth scopes array in auth.py to scuba_constants.py

Acceptance criteria

• Permissions for ScubaGoggles are abstracted out to scuba_constants.py
• - Update auth.py to reference the scuba constants variable
• - For the permissions file abstracted issue, we test and ensure both OAuth and service account authentication both still work.

[FollyBeachGurl]

Standup Status: Team will refine this issue during Monday's parking lot (after standup).