Change from API scope to read_user, so we only have read access (#10225)

[FIX] GitLab authentication scope was too open, reduced to read only access

packages/rocketchat-gitlab/common.js

@@ -2,7 +2,7 @@
 const config = {
 	serverURL: 'https://gitlab.com',
 	identityPath: '/api/v3/user',
-	scope: 'api',
+	scope: 'read_user',
 	addAutopublishFields: {
 		forLoggedInUser: ['services.gitlab'],
 		forOtherUsers: ['services.gitlab.username']