gitlaboauth: Allow configuring a different api scope

Created by: ryanslade

This change adds the ApiScope field to the GitLabAuthProvider which enables changing the default scope from api to read_api.

Fixes: https://github.com/sourcegraph/customer/issues/513