feat: add allowList to policies for jobs authz

[minottic]

Description

Add policy based authorisation to jobs

Motivation

Some jobs are restricted to single users per ownergroup, for example deletion ones are restricted to a very limited pool of users not contained in the dataset

Tests included

• Included for each change/fix?
• Passing?

Documentation

• swagger documentation updated (required for API changes)
• official documentation updated

official documentation info

Summary by Sourcery

Enable allow-list policy authorization for creating jobs across datasets.

New Features:

• Add policy-based job creation authorization that matches users by email or group against per-job allow lists on dataset owner policies.

Enhancements:

• Require all datasets in a multi-dataset job request to authorize the requesting user through their linked policies, while preserving administrator access.

Documentation:

• Document the new #datasetPolicyList authorization mode and allowed-list policy configuration in the example job configuration and API schema.

Tests:

• Add end-to-end coverage for email and group authorization, denied access, missing or empty policies, mixed dataset requests, unauthenticated requests, and administrator access.

[sourcery-ai]

Sorry @minottic, you've used your own review budget of 250,000 diff characters for the last 7 days.

You can request another review in 15 hours and 44 minutes by commenting @sourcery-ai review. Upgrade to get a review now.