Support JWTs that use v2 scopes (.cruds)

[mikix]

Rather than v1 scopes like .read or .write

Before this change, if the JWT had a scope like system/Patient.r, the bulk server would compare the r against read and obviously fail. This commit converts all incoming scopes to v2 format as we read them, so that the internals only have to care about v2.