feat: update revenue endpoint auth

[DmitryAnansky]

Updated Cafe API revenue endpoint with double auth type security.
The reason for that - is the easier demonstration.
So now both OAuth2 and APIKey auth will work for revenue endpoint.
Also introduced new revenue:read scope.

[redocly]

cafe AI Review: 🟢 Completed

Reunite Bot has reviewed your changes and found 2 potential issue(s).

Note

Low Risk

This PR poses minimal risk as the changes are isolated to OpenAPI schema definitions and a UI configuration hook. Adding a new scope and alternative authentication method for a single endpoint is non-disruptive and maintains backward compatibility.

Overview

Updates the Cafe API documentation to support dual authentication for the /revenue endpoint, adding OAuth2 alongside the existing API Key auth. Introduces a new revenue:read scope across OAuth2 security definitions, schema components (OAuth2Client, RegisterClientObject), and examples. Additionally, updates the internal theme replay configuration to recognize the newly added scope.