hydra: add offline_access scope for refresh tokens

[davidspek]

Summary

Currently the Plural OIDC provider does not support returning refresh tokens. This PR adds the offline_access scope to OIDC clients when they are created, as well as too the app consent following https://www.ory.sh/docs/hydra/debug#oauth-20-refresh-token-is-missing.

Test Plan

Checklist

• If required, I have updated the Plural documentation accordingly.
• I have added tests to cover my changes.
• I have added a meaningful title and summary to convey the impact of this PR to a user.
• I have added relevant labels to this PR to help with categorization for release notes.

[michaeljguarino]

My guess is the apps need to be configured to request these scopes as well, but let's try it. We should hold off until merging until night time EST to minimize issues if it breaks something though.

[davidspek]

@michaeljguarino Indeed the apps need to be configured to request the scopes, but they currently can't because the scope is not enabled for them.