Option to specify additional oidc_scopes

[asafhm]

There's a need to be able to control the oidc_scopes list of vault_jwt_auth_backend_role.okta_role[] resources via a variable.

Use case example: If one uses the default Organization Authorization Server, one needs to be able to add the groups to the list, otherwise Vault won't be able to get information on the user's groups.