Merge of engineapi and moonstreamapi about api HOT 2 OPEN

Design doc: https://docs.google.com/document/d/1DVdzbXRBBkMCBZWB0BzS7AsRlCBSKJDaRkB294I_7T8/edit

from api.

Also there are different requrements for authorization changes.

Right now we are using class BroodAuthMiddleware(BaseHTTPMiddleware) with whitelist: Optional[Dict[str, str]] where you can specify what route Path could bypass middleware authentification check in FastAPI app. We found it not scalable, because it brings regexp logic if you need to apply it route Path like @app.get("/{leaderboard_id}/config") where leaderboard_id could uuid or number or any other string - depends on usecase.

Umfortunatly, FastAPI dunctionality does not provide this functionality and disscusion exists for 3 years already: tiangolo/fastapi#7691

After some investigation, there are some solutions:

1. Continue modify BroodAuthMiddleware or APIRouter
2. Split authentificated routes to apps
3. Migrate from middlewares to Dependencies.

From my point of view 1st solution will bring to us overcomplicated authorization logic which better to avoid in such important parts of code. Another 2nd solution split pathes in documentation and could make application not friendly for other developers who use our code from outside.

Preferable solution to migrate from middlewares to FastAPI Dependencies, same approach we are using in bugout-dev/brood like user_authorization = Depends(request_user_authorization). It will requires additional checks that all routes correctly set and also brings some code duplication. But we will have more granular set up.

from api.