Update endpoint `GET /users/{pcgl_id}` to be accessible through registered service credentials.

[JamesTLopez]

Description

Similar to endpoints GET /group/{group_id} and POST /reload, we need to be able to query GET /users/{pcgl_id} with just service credentials as well.

Affected Endpoints:

• GET /users/{pcgl_id}

pcgl-authz/app/src/authz_openapi.yaml

Line 271 in 9f46c36

/user/{pcgl_id}:

Reasoning

This is needed to retrieve dacChair and dacMember email addresses for a study to send automated notifications when actions require their attention.

• Example: When an applicant submits updates for requested revisions, the DACO service notifies the relevant dacChair via email.

Current Response from AuthZ

service-id: DACO

{
  "type": "about:blank",
  "title": "Unauthorized",
  "detail": "No authorization token provided",
  "status": 401
}

[daisieh]

I think that it would be safer to implement #70 than to allow open access to user credentials with only service tokens.