add Amp scopes (#94)

Adds scopes so we can use M2M to interact with Amp and mutate user
accounts.

## Test plan
CI

Author: evict

scopes/scopes.go

@@ -127,6 +127,9 @@ var (
 	mailGatekeeperPermissions = []Permission{
 		"emails",
 	}
+	ampPermissions = []Permission{
+		"user",
+	}
 	analyticsPermissions = []Permission{
 		"analytics",
 	}
@@ -182,6 +185,7 @@ func Allowed() AllowedScopes {
 		}
 	}
 
+	appendScopes(services.Amp, ampPermissions)
 	appendScopes(services.CodyGateway, codyGatewayPermissions)
 	appendScopes(services.SAMS, samsPermissions)
 	appendScopes(services.TelemetryGateway, telemetryGatewayPermissions)

scopes/scopes_test.go

@@ -14,6 +14,9 @@ func TestAllowedGoldenList(t *testing.T) {
 		Scope("offline_access"),
 		Scope("client.ssc"),
 		Scope("client.dotcom"),
+		Scope("amp::user::read"),
+		Scope("amp::user::write"),
+		Scope("amp::user::delete"),
 		Scope("cody_gateway::flaggedprompts::read"),
 		Scope("cody_gateway::flaggedprompts::write"),
 		Scope("cody_gateway::flaggedprompts::delete"),

services/services.go

@@ -5,6 +5,7 @@ type Service string
 
 // The list of registered services that publish scopes and/or roles.
 const (
+	Amp              Service = "amp"
 	CodyGateway      Service = "cody_gateway"
 	Dotcom           Service = "dotcom"
 	SAMS             Service = "sams"
@@ -17,6 +18,7 @@ const (
 )
 
 var serviceNames = map[Service]string{
+	Amp:              "Amp",
 	CodyGateway:      "Cody Gateway",
 	Dotcom:           "Sourcegraph Dotcom",
 	SAMS:             "Sourcegraph Accounts Management System",