Self-Serve CLA Signing & My CLAs Enhancements

New Features

• Sign CLA from Self-Serve: Contributors can now sign CLAs directly within the Self-Serve portal, streamlining the onboarding workflow without switching tools.
• CLA Group Search: Adds a search API for CLA groups, enabling easier discovery and selection during self-service signing flows.
• Project Name & Logo in My CLAs: The My CLAs API now returns project display names and logos, giving contributors richer context about their signed agreements.
• ICLA Invalidation Metadata: My CLAs now surfaces invalidation details — including the date, actor, reason, and note — for revoked individual agreements. Re-signing an invalidated ICLA is also prevented.
• Sanctions Revocation Date: When a contributor is flagged by sanctions screening, the detection date is now recorded and surfaced as the revocation date in My CLAs.
• Authorization Party (azp) Support: Adds support for the azp claim in authorization tokens, improving compatibility with additional identity providers.