chore: adds initial proposal from the backlog working group

[caubut-charter]

What type of PR is this?

Add one of the following kinds:

• subproject management

What this PR does / why we need it:

Copies the proposal from the backlog working group into this repo.

Which issue(s) this PR fixes:

Special notes for reviewers:

Leaving this PR open for at least a couple weeks to gather initial comments and to schedule a first meeting.

Changelog input

Adds initial proposal from the backlog working group.

Additional documentation

[github-actions]

🦙 MegaLinter status: ✅ SUCCESS

Descriptor	Linter	Files	Fixed	Errors	Elapsed time
✅ ACTION	actionlint	2		0	0.03s
✅ OPENAPI	spectral	1		0	3.01s
✅ REPOSITORY	git_diff	yes		no	0.01s
✅ REPOSITORY	secretlint	yes		no	0.73s
✅ YAML	yamllint	1		0	0.69s

See detailed report in MegaLinter reports

MegaLinter is graciously provided by

[RandyLevensalor]

A few comments regarding oauth.

[hdamker]

@caubut-charter @RandyLevensalor Please refer to the work of Identity & Consent Management - there shouldn't be a need to have a detailed discussion here, especially if 3-legged is your default use case.

Regarding the definition of securitySchemes and security: https://github.com/camaraproject/IdentityAndConsentManagement/blob/main/documentation/CAMARA-API-access-and-user-consent.md#camara-api-specification---authorization-and-authentication-common-guidelines

And regarding the details of the flows, e.g. PKCE, see https://github.com/camaraproject/IdentityAndConsentManagement/blob/main/documentation/CAMARA-Security-Interoperability.md

[hdamker]

The "approval" was accidentally done ... I wanted mainly to comment on the security discussion. Please consider #7 (review) as a comment. Maybe it is fine to commit the initial content, but with Version: wip and have a separat discussion about the security topics.

[jpengar]

I've made some very general initial comments. I understand that it's fine if you want to add this as a "wip" first version to iterate on, and you don't need to fix everything in this PR. And I will give a second thought to what refers to the functionality this API provides and how it relates to the Home Devices QoD. At the moment I'm not really sure if we need to align anything in the definitions of the two APIs.

[caubut-charter]

Mostly done. Two tasks left:

1. (wip) Finish adding minimal scopes in the security prop to every endpoint.
2. Align on CAMARA terminology, such as replace remaining CPE references with Network Access Management in the description text and review the other terms used in https://github.com/camaraproject/Commonalities/blob/main/documentation/Glossary.md.

Opened #12 and #13 as follow up items.

[caubut-charter]

Randy opened #14 to go over the glossary and remove CPE.

Finished adding sec defs.

[RandyLevensalor]

This is a good initial commit. As mentioned there are additional items before the fist beta release.

Requested changes made or split out into different issues.