feat(utils): add GatewayAgentEnroll / GatewayAgentRead scopes + bump version

Mirrors the two new `AccessScope` variants (`gateway.agent.enroll` /
`gateway.agent.read`) on the .NET side so DVLS's `ScopeClaims` can sign
scope tokens with the canonical scope names instead of the broader
`ConfigWrite` / `DiagnosticsRead` fallbacks.

Bumps the package version to `2025.10.2-pr2-alpha1` (prerelease) so
downstream consumers can pin to this build for dev / PR validation
without clashing with the published 2025.10.1.

Adds JSON round-trip tests confirming the two new scopes serialize to
their expected `scope` field strings.

Author: irvingoujAtDevolution

utils/dotnet/Devolutions.Gateway.Utils.Tests/JsonSerializationTests.cs

@@ -156,6 +156,26 @@ public void ScopeClaims()
         Assert.Equal(EXPECTED, result);
     }
 
+    [Fact]
+    public void ScopeClaimsAgentEnroll()
+    {
+        const string EXPECTED = """{"scope":"gateway.agent.enroll","jet_gw_id":"ccbaad3f-4627-4666-8bb5-cb6a1a7db815"}""";
+
+        var claims = new ScopeClaims(gatewayId, AccessScope.GatewayAgentEnroll);
+        string result = JsonSerializer.Serialize(claims);
+        Assert.Equal(EXPECTED, result);
+    }
+
+    [Fact]
+    public void ScopeClaimsAgentRead()
+    {
+        const string EXPECTED = """{"scope":"gateway.agent.read","jet_gw_id":"ccbaad3f-4627-4666-8bb5-cb6a1a7db815"}""";
+
+        var claims = new ScopeClaims(gatewayId, AccessScope.GatewayAgentRead);
+        string result = JsonSerializer.Serialize(claims);
+        Assert.Equal(EXPECTED, result);
+    }
+
     [Fact]
     public void NetScanClaims()
     {

utils/dotnet/Devolutions.Gateway.Utils/Devolutions.Gateway.Utils.csproj

@@ -11,7 +11,7 @@
     <Description>Useful classes to use Devolutions Gateway</Description>
     <Copyright>© Devolutions Inc. All rights reserved.</Copyright>
     <RootNamespace>Devolutions.Gateway.Utils</RootNamespace>
-    <Version>2025.10.1.0</Version>
+    <Version>2025.10.2-pr2-alpha1</Version>
     <PackageLicenseExpression>MIT OR Apache-2.0</PackageLicenseExpression>
     <RepositoryUrl>https://github.com/Devolutions/devolutions-gateway.git</RepositoryUrl>
     <RepositoryType>git</RepositoryType>

utils/dotnet/Devolutions.Gateway.Utils/src/AccessScope.cs

@@ -28,6 +28,8 @@ internal AccessScope(string value)
     public static AccessScope GatewayTrafficAck = new AccessScope("gateway.traffic.ack");
     public static AccessScope GatewayNetMonitorConfig = new AccessScope("gateway.net.monitor.config");
     public static AccessScope GatewayNetMonitorDrain = new AccessScope("gateway.net.monitor.drain");
+    public static AccessScope GatewayAgentEnroll = new AccessScope("gateway.agent.enroll");
+    public static AccessScope GatewayAgentRead = new AccessScope("gateway.agent.read");
 
     public override string? ToString()
     {