[public-api] Authentication interceptors for connect API

[easyCZ]

Description

Adds authentication interceptors for connect API on public-api.

This is a pre-cursor to refactoring existing handlers to use connect.

Related Issue(s)

• Part of Epic: Dashboard communicates with Public API #13574

How to test

• Unit tests

➜ curl \
    --header 'Content-Type: application/json' \
    --data '{"workspaceId": "123"}' \
    https://api.mp-public-8c1701f31b.preview.gitpod-dev.com/gitpod.v1.WorkspacesService/GetWorkspace | jq

{
  "code": "unauthenticated",
  "message": "empty authorization header: missing access token"
}

➜ curl \
    --header 'Content-Type: application/json' \
    --header 'Authorization: Bearer foo' \
    --data '{"workspaceId": "123"}' \
    https://api.mp-public-8c1701f31b.preview.gitpod-dev.com/gitpod.v1.WorkspacesService/GetWorkspace | jq

{
  "code": "unimplemented",
  "message": "gitpod.v1.WorkspacesService.GetWorkspace is not implemented"
}

Release Notes

NONE

Documentation

Werft options:

• /werft with-local-preview
  If enabled this will build install/preview
• /werft with-preview
• /werft with-integration-tests=all
  Valid options are all, workspace, webapp, ide

[werft-gitpod-dev-com]

started the job as gitpod-build-mp-public-api-connect-auth.2 because the annotations in the pull request description changed
(with .werft/ from main)