[cfid-397] Add approvals to ScimUser. Fixes [#41051829].

[cfid-487] Fix bug in calculation of approval expiry. Fixes [#42174475].
In addition, relax authorizations for /Users such that users can access their own ScimUser
resource.

Change-Id: I52324843095f2c8f48f710baaede83aa46c164aa