Update code to use API scope on PAT auth

app/controllers/application_controller.rb

app/controllers/concerns/sessionless_authentication.rb

app/controllers/dashboard/projects_controller.rb

app/controllers/dashboard_controller.rb

app/controllers/graphql_controller.rb

app/controllers/groups_controller.rb

app/controllers/projects/commits_controller.rb

app/controllers/projects/issues_controller.rb

app/controllers/projects/tags_controller.rb

app/controllers/projects_controller.rb

app/controllers/users_controller.rb

changelogs/unreleased/security-fix-pat-web-access.yml

config/initializers/rack_attack_global.rb

lib/gitlab/auth/request_authenticator.rb

lib/gitlab/auth/user_auth_finders.rb

spec/controllers/application_controller_spec.rb

spec/controllers/dashboard/projects_controller_spec.rb

spec/controllers/dashboard_controller_spec.rb

spec/controllers/graphql_controller_spec.rb

spec/controllers/groups_controller_spec.rb