API: introduce OAuth2 as authentication subsystem

[paullatzelsperger]

Similar to the authentication and authorization scheme used for EDC-V components, which is based on OAuth2 and RBAC, CFM's APIs must also be protected using the same scheme.

This increases security.