Change OAuthScopes into an interface as opposed to boilerplating annotations

Particularly in google storage, incorrect `@OAuthScopes` annotations were pasted in a lot of places, guaranteed via also pasting them in tests. This change avoids copy/paste issues, as the current clouds we support have a rather simple set of rules. For example, the following sets up google compute for almost all api usage:

```java
      bind(OAuthScopes.class).toInstance(ReadOrWriteScopes.create(
            "https://www.googleapis.com/auth/compute.readonly",
            "https://www.googleapis.com/auth/compute"
      ));
```

Details:

 * Change OAuthScopes into an interface as opposed to boilerplating annotations
 * Fixed errors because of boilerplating annotations.
[minor] Call this "fullControlApis" or something? If I understand correctly, what distinguishes these APIs is that they need full, rather than R/W control. That happens to apply to the ACL APIs at this point, but this class does not need to know that?