add config for additional oauth scopes

[tronghn]

• chore(deps): go mod 1.24.0, remove toolchain directive
• add config for additional oauth scopes
• make prompt parameter for login optional

Pull Request Overview

This PR introduces configuration changes to support additional OAuth scopes, updates the Go toolchain version, and makes the prompt parameter for login optional. Key modifications include updating the OAuth login handler to conditionally use a provided prompt, adding a new configuration field for additional OAuth scopes in charts and application config files, and updating the OIDC constructor and API handler to pass along the new scope configuration.

Reviewed Changes

Copilot reviewed 8 out of 10 changed files in this pull request and generated no comments.

Show a summary per file

File	Description
internal/auth/authn/handler.go	Updates the Login function to conditionally include the prompt parameter in the OAuth URL.
charts/values.yaml	Adds an additionalScopes field to configure extra OAuth scopes.
charts/templates/deployment.yaml	Passes the additionalScopes config value to the deployment via an environment variable.
mise.toml	Updates the go tool version from 1.24.0 to 1.24.1.
charts/Feature.yaml	Adds UI metadata for the additional OAuth scopes configuration.
internal/cmd/api/config.go	Introduces AdditionalScopes field in the OAuth config struct.
internal/auth/authn/oidc.go	Updates the NewOIDC function to accept and incorporate additional scopes.
internal/cmd/api/api.go	Adjusts the NewOIDC call to pass the new AdditionalScopes configuration.

Files not reviewed (2)

• go.mod: Language not supported
• pkg/apiclient/go.mod: Language not supported

Comments suppressed due to low confidence (2)

internal/auth/authn/handler.go:81

• [nitpick] Consider adding tests for the conditional handling of the 'prompt' parameter in the Login function to verify that various values (including an empty value) result in the expected OAuth URL.

if prompt := r.URL.Query().Get("prompt"); prompt != "" {

charts/templates/deployment.yaml:75

• [nitpick] Consider adding tests for the deployment template to ensure that joining additionalScopes produces a valid comma-separated string, particularly when the array is empty or contains special characters.

- name: OAUTH_ADDITIONAL_SCOPES