control-service: add OAuth authN & authZ for data jobs (#3398)