[authz] Add coverage for more endpoints

[smklein]

Fixes #9747

[david-crespo]

This is correct but now that these endpoints aren't exempted here, they need audit logging. Which makes me realize the audit log test must only be checking endpoints that not exempted here? Wtf? Looking into that.

[david-crespo]

Yeah. The audit log coverage test does use the schema for getting operation IDs, but for the actual looping through the endpoints, it doesn't. Let me fix it on this branch and I'll fix the endpoints missing audit logging too.

omicron/nexus/tests/integration_tests/audit_log.rs

Lines 418 to 445 in c765b35

	// Build a map from (method, url_regex) to (operation_id, path_template)
	let spec_operations: BTreeMap<(String, String), (String, String)> = spec
	.operations()
	.map(|(path, method, op)| {
	// Convert path template to regex pattern
	let re = regex::Regex::new("/\\{[^}]+\\}").unwrap();
	let regex_path = re.replace_all(path, "/[^/]+");
	let regex = format!("^{}$", regex_path);
	let label = op
	.operation_id
	.clone()
	.unwrap_or_else(|| String::from("unknown"));
	((method.to_uppercase(), regex), (label, path.to_string()))
	})
	.collect();
	// Set up resources needed by many endpoints
	DiskTest::new(&ctx).await;
	create_default_ip_pools(client).await;
	let _project = create_project(client, "demo-project").await;
	let t_start = Utc::now();
	let mut missing_audit: BTreeMap<String, (String, String)> = BTreeMap::new();
	let mut unexpected_get_audit: BTreeMap<String, (String, String)> =
	BTreeMap::new();
	for endpoint in &*VERIFY_ENDPOINTS {

[david-crespo]

There are bigger changes to the audit log coverage test I need to make, but after fixing the endpoints I fixed here, I think the only endpoint genuinely missing coverage is logout. Writing up an issue for all that. In the meantime I'm going to merge this so we can get #9671 in.