fix(apigateway): match measured JWT claim wire format and enforce route authorizationScopes (#2011)