Add swagger access info and form endpoint permissions

[cherylli]

Description

Updated swagger endpoint descriptions for auth, and forms
Add permission to forms

Only part of the task as I don't want the PR to get to big

CASL notes for reference: https://suwanna.atlassian.net/wiki/spaces/SD/pages/76349451/CASL

Issues:
It seems prisma/casl doesn't support matching nested values (https://casl.js.org/v5/en/guide/conditions-in-depth#match-nested-property-value)
so I have used a workaround instead

Issue link

https://app.clickup.com/t/86azr0q42

Type of change

• Bug fix (non-breaking change which fixes an issue)
• Feature updates / changes
• Tests
• New feature (non-breaking change which adds functionality)
• Breaking change (fix or feature that would cause existing functionality to not work as expected)
• This change requires a documentation update

How Has This Been Tested?

Tested on swagger, and yarn test:docker

Checklist:

• My code follows the style guidelines of this project
• I have performed a self-review of my code
• I have commented my code, particularly in hard-to-understand areas
• I have made corresponding changes to the documentation
• My changes generate no new warnings
• I have added tests that prove my fix is effective or that my feature works
• New and existing tests pass locally with my changes
• Any dependent changes have been merged and published in downstream modules
• I have updated the change log

[curtwl]

lgtm

[Ajen07]

All the new permissions are working as expected .