fix: Improve BitBucket token scopes validation

[tolusha]

What does this PR do?

This PR improves BitBucket token scopes validation.
The minimal list of permissions:

• repository:write or pullrequest:write (since pullrequest:write is wider than repository:write)
• account or account:write (since account:write is wider than account)

Screenshot/screencast of this PR

N/A

What issues does this PR fix or reference?

eclipse-che/che#22301

How to test this PR?

Image to use: quay.io/eclipse/che-server:pr-547

PR Checklist

As the author of this Pull Request I made sure that:

• The Eclipse Contributor Agreement is valid
• Code produced is complete
• Code builds without errors
• Tests are covering the bugfix
• The repository devfile is up to date and works
• Sections What issues does this PR fix or reference and How to test this PR completed
• Relevant user documentation updated
• Relevant contributing documentation updated
• CI/CD changes implemented, documented and communicated

Reviewers

Reviewers, please comment how you tested the PR when approving it.

[vinokurig]

@tolusha Why do we need write permissions? We can use account:read and repository:read as a minimum scope.

[tolusha]

repository:read won't let you push to the repository (I guess).
So, the minimum set is account (not account:read) and repository:write.

The trick is the following: if account:write permission is selected, then BitBucket doesn't return account permission in the list of selected permissions. So, that's why we need to check if returned list contains either account or account:write permission.

The same is valid for repository.

[openshift-ci]

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: tolusha, vinokurig

The full list of commands accepted by this bot can be found here.

Needs approval from an approver in each of these files:

• OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[devstudio-release]

Build 3.9 :: server_3.x/199: Console, Changes, Git Data

[devstudio-release]

Build 3.9 :: sync-to-downstream_3.x/4109: Console, Changes, Git Data

[devstudio-release]

Build 3.9 :: get-sources-rhpkg-container-build_3.x/3963: Console, Changes, Git Data

[devstudio-release]

Build 3.9 :: get-sources-rhpkg-container-build_3.x/3963:

server : 3.x :: Failed in : BREW:BUILD/STATUS:UNKNOWN
FAILURE:; copied to quay