feat(dotnet-utils): add the AI analysis and task read scopes

DVLS can now sign scope tokens for `gateway.recording.analyze`, to start
an AI analysis of a recorded session, and `gateway.tasks.read`, to read
a Task.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

Author: irvingoujAtDevolution

utils/dotnet/Devolutions.Gateway.Utils.Tests/JsonSerializationTests.cs

@@ -208,6 +208,26 @@ public void ScopeClaimsAgentRead()
         Assert.Equal(EXPECTED, result);
     }
 
+    [Fact]
+    public void ScopeClaimsRecordingAnalyze()
+    {
+        const string EXPECTED = """{"scope":"gateway.recording.analyze","jet_gw_id":"ccbaad3f-4627-4666-8bb5-cb6a1a7db815"}""";
+
+        var claims = new ScopeClaims(gatewayId, AccessScope.GatewayRecordingAnalyze);
+        string result = JsonSerializer.Serialize(claims);
+        Assert.Equal(EXPECTED, result);
+    }
+
+    [Fact]
+    public void ScopeClaimsTasksRead()
+    {
+        const string EXPECTED = """{"scope":"gateway.tasks.read","jet_gw_id":"ccbaad3f-4627-4666-8bb5-cb6a1a7db815"}""";
+
+        var claims = new ScopeClaims(gatewayId, AccessScope.GatewayTasksRead);
+        string result = JsonSerializer.Serialize(claims);
+        Assert.Equal(EXPECTED, result);
+    }
+
     [Fact]
     public void EnrollmentClaimsAllFields()
     {

utils/dotnet/Devolutions.Gateway.Utils/src/AccessScope.cs

@@ -30,6 +30,8 @@ internal AccessScope(string value)
     public static AccessScope GatewayNetMonitorDrain = new AccessScope("gateway.net.monitor.drain");
     public static AccessScope GatewayAgentDelete = new AccessScope("gateway.agent.delete");
     public static AccessScope GatewayAgentRead = new AccessScope("gateway.agent.read");
+    public static AccessScope GatewayRecordingAnalyze = new AccessScope("gateway.recording.analyze");
+    public static AccessScope GatewayTasksRead = new AccessScope("gateway.tasks.read");
 
     public override string? ToString()
     {