Add grantedBy to DataAuthorization

[justinwb]

Implementation experience is that this would be useful to have within the DataConsent rather than needing to source it from the AccessConsent.

[elf-pavlik]

#299 notes:

@elf-pavlik: I want to double check if it is related to dataOwner since grantedBy is only used for the audit trail.
@justinwb: I haven't come up with a strong reason to have it since I created this issue.

[elf-pavlik]

Actually comparing the dataOwner and granted for all the scopes except All helps with deciding if DataGrant or DelegatedDataGrant should be generated.

https://github.com/janeirodigital/sai-js/blob/main/packages/data-model/src/readable/data-authorization.ts#L252-L283