JobSink: Reject unauthorized requests

[creydr]

Fixes #8166

Proposed Changes

• 🎁 Reject unauthorized requests in the JobSink

Release Note

JobSink: Reject unauthorized requests

WIP, as it needs the following before:

• Fix: Use correct readyness check in AuthZ conformance tests #8167
• Fix JobSink to have ObservedGeneration in status #8168

[codecov]

Codecov Report

Attention: Patch coverage is 0% with 10 lines in your changes missing coverage. Please review.

Project coverage is 67.48%. Comparing base (5fc4c0f) to head (d97ddc2).
Report is 1 commits behind head on main.

Files	Patch %	Lines
cmd/jobsink/main.go	0.00%	10 Missing ⚠️

Additional details and impacted files

@@            Coverage Diff             @@
##             main    #8169      +/-   ##
==========================================
+ Coverage   67.46%   67.48%   +0.02%     
==========================================
  Files         371      371              
  Lines       18001    17995       -6     
==========================================
  Hits        12144    12144              
+ Misses       5085     5079       -6     
  Partials      772      772              

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

[creydr]

Rebased as #8168 and #8167 merged

[creydr]

/test reconciler-tests

[creydr]

@pierDipi I think this is ready for review

[creydr]

@pierDipi could you check on this?
/cc @pierDipi

[pierDipi]

/lgtm
/approve

[knative-prow]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: creydr, pierDipi

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

• OWNERS [creydr,pierDipi]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment