Reworked the use of scopes.

Instead of requesting all scopes up front, each sub-section of the backup/restore will request the permissions that are relevant for the operation.

The effect is that it is not required to grant all permissions to get a backup running. If permissions are failing, that part of the backup will generate warnings for items that are excluded.

proprietary/GoogleWorkspace/SourceItems/DriveFileRevisionsSourceEntry.cs

@@ -4,16 +4,16 @@ using Duplicati.Library.Common.IO;
 using Duplicati.Library.Interface;
 using System.Runtime.CompilerServices;
 using File = Google.Apis.Drive.v3.Data.File;
+using Google.Apis.Drive.v3;
 
 namespace Duplicati.Proprietary.GoogleWorkspace.SourceItems;
 
-internal class DriveFileRevisionsSourceEntry(SourceProvider provider, string parentPath, File file)
+internal class DriveFileRevisionsSourceEntry(string parentPath, File file, DriveService driveService)
     : MetaEntryBase(Util.AppendDirSeparator(SystemIO.IO_OS.PathCombine(parentPath, "Revisions")), null, null)
 {
     public override async IAsyncEnumerable<ISourceProviderEntry> Enumerate([EnumeratorCancellation] CancellationToken cancellationToken)
     {
-        var service = provider.ApiHelper.GetDriveService();
-        var request = service.Revisions.List(file.Id);
+        var request = driveService.Revisions.List(file.Id);
         var revisions = await request.ExecuteAsync(cancellationToken);
 
         if (revisions.Revisions != null)
@@ -21,7 +21,7 @@ internal class DriveFileRevisionsSourceEntry(SourceProvider provider, string par
             foreach (var revision in revisions.Revisions)
             {
                 if (cancellationToken.IsCancellationRequested) yield break;
-                yield return new DriveFileRevisionContentSourceEntry(provider, this.Path, file, revision);
+                yield return new DriveFileRevisionContentSourceEntry(this.Path, file, revision, driveService);
             }
         }
     }