BB2-3353 Initialize oAuth and allow logout flow in openapi

[stiwarisemanticbits]

JIRA Ticket:
BB2-3353

What Does This PR Do?

Initialize oAuth and allow logout flow in openapi

What Should Reviewers Watch For?

If you're reviewing this PR, please check for these things in particular:

Validation

What Security Implications Does This PR Have?

Please indicate if this PR does any of the following:

• Adds any new software dependencies
• Modifies any security controls
• Adds new transmission or storage of data
• Any other changes that could possibly affect security?

• Yes, one or more of the above security implications apply. This PR must not be merged without the ISSO or team
  security engineer's approval.

Any Migrations?

• Yes, there are migrations
  • The migrations should be run PRIOR to the code being deployed
  • The migrations should be run AFTER the code is deployed
  • There is a more complicated migration plan (downtime,
    etc)
• No migrations

[JFU-NAVA-PBC]

LGTM

tweaked openapi.yaml to point to BB2 local server and verified that authorization with an app registered with the local bb2 works as expected:

1. logout button shown after auth flow
2. fetched resources after auth flow
3. click logout
4. fetch resources again got 401 with error:
5. {
   "detail": "Authentication credentials were not provided."
   }

[JFU-NAVA-PBC]

the additions looks good.