OAuth: Add scopes to some endpoints

Adds "read" scope to GET_listing
Adds "submit" scope to POST_update
Adds "edit" scope to striking/deleting updates