Upgrade to gds-sso to make next upgrade closer
Use the new permissions format (Array)

This upgrades gds-sso to 3.0.0, which handles both Hash and Array format
from signon. Signon currently supplies Hash, but once all apps are upgraded,
we will change it to emit an Array.