Globus-cli

Enhancements:

* Added gcs endpoint role management commands:

** `globus gcs endpoint role create`
** `globus gcs endpoint role list`
** `globus gcs endpoint role show`
** `globus gcs endpoint role delete`

* Introduced principal urn resolution as a common util function

* Add `--subscription-id` to `globus flows create` options, and add
`Subscription ID` to `flows` command outputs

* `--format=JSON` output now offers greater detail when API errors are
encountered with JSON bodies. Rather than re-encoding error details, the
original error body is now shown in these cases.

* Added support for GCSv5 endpoint displaying & updating:

** `globus gcs endpoint show ENDPOINT_ID`
** `globus gcs endpoint update ENDPOINT_ID`

Other:

* `globus login` and related commands are now more tolerant of clock drift, and
will emit a clearer error message when clock drift is severe enough to cause
errors during authentication attempts.

Bugfixes

* Fixes a bug which would not allow users to utilize `--anonymous` or
`--all-authenticated` when creating an endpoint permission.

Other

* Remove support for Python 3.7

Bugfixes:

* Fix the display of timer schedules.

* Fix the error handling when `globus gcs collection create guest` encounters a
non-session error.

Enhancements:

* Add `globus gcs collection create mapped` as a new command for creating
mapped collections

* Added a new command `globus gcs endpoint set-subscription-id` which allows
subscription managers and endpoint admins to modify the subscription ID for a
GCS endpoint.

* Added a new command `globus gcp set-subscription-id` which allows subscription
managers and collection admins to modify the subscription ID for a GCP collection.

Other:

* User timers are now referred to as "timers" rather than as "jobs".
For example, the output of `globus timer list` now shows "Timer ID"
instead of "Job ID".

Enhancements:

* Add `globus api gcs $ENDPOINT_ID` as a command for directly interacting with
the GCS Manager API

Bugfixes:

* Commands which attempt to infer the identity of the user running the command will now
correctly use the `client_id` for confidential client-based invocation patterns.

Enhancements:

* The ``globus api <service>`` command now supports a ``--scope-string`` parameter.

** If supplied, the CLI will enforce that any specified scope strings are included
in consent requirements *in addition to* standard service scope requirements.

** This parameter may be supplied multiple times to specify multiple scope strings.

** This parameter is only supported in the context of Client Credentials-based authentication.
([Client Credentials with GLOBUS_CLI_CLIENT_ID](https://docs.globus.org/cli/environment_variables/#client_credentials_with_globus_cli_client_id))

* Support Python 3.12.

Other:

* Test against Python 3.12 in CI.

* Replaced all references to the tutorial endpoints.

* Deprecate and hide commands related to management of GCSv4:

** `globus endpoint activate`
** `globus endpoint deactivate`
** `globus endpoint is-activated`
** `globus endpoint server`

Bugfixes:

* Accommodate copied-and-pasted API routes to the `globus api groups` command
that include the `/v2` route.

Enhancements:

* Added a new command for users to create GCSv5 Guest Collections.
+
[source]
----
globus collection create guest <mapped_collection_id> <root_path> <display_name>
----

* Introduce a new command, `globus gcs`, for GCSv5 Collection, Storage Gateway, and
User Credential management.

Other:

* The `globus timer create transfer` command now supports the latest
version of the Globus Timers API.