Use Signon for permissions

Stagecraft no longer has a token in its config that it verifies with apps requesting information from it.

Instead, applications that want to check something with Stagecraft use an access token for that specific user, which Stagecraft passes upstream to GOV.UK Signon to retrieve a list of permissions. It then approves or denies the request based on those permissions.