chore(schemas): add cloud scope, service log type and API guard

[darcyYe]

Summary

Update schemas for cloud API POST /services/custom-jwt, which includes:

1. add new cloud scope fetch:custom:jwt, users/machines can access the previously mentioned API with this scope.
2. add alteration job to assign this fetch:custom:jwt cloud scope to cloud connection m2m app role
3. add the fetch:custom:jwt scope to DB seed
4. add service log type, we should log the API call activities with the proper log type.
5. add API request body guard

Testing

N/A

Checklist

• .changeset
• unit tests
• integration tests
• necessary TSDoc comments

[github-actions]

COMPARE TO master

Total Size Diff 📈 +3.65 KB

Diff by File

Name	Diff
packages/cli/src/commands/database/seed/tables.ts	📈 +84 Bytes
packages/schemas/alterations/next-1710223946-add-fetch-custom-jwt-cloud-scope.ts	📈 +2.58 KB
packages/schemas/src/seeds/cloud-api.ts	📈 +382 Bytes
packages/schemas/src/types/jwt-customizer.ts	📈 +582 Bytes
packages/schemas/src/types/logto-config/index.ts	📈 +7 Bytes
packages/schemas/src/types/service-log.ts	📈 +37 Bytes

[simeng-li]

LGTM