- allow customizing scopes
- properly add Content-Length header in refresh HTTP request (avoid 400 responses with some IDP eg Azure)
- make clientSecret optional, as it is not needed when using PKCE

This makes uri handling in SEGYImport easier and makes it possible for
SEGYImport to read seagy from dms location. This is a behavior change in
the IOManager api so all backends have been manually verified

We can not enable the performance fix because of another bug in the AWS
backend, but we now detect zero size blobs by a sideeffect of reading
head.

Also improve the state handling in the different IO manager
implementations with a RAII state handler