Reject push, delete, and * JWT requests for container repositories
that are currently importing.

Add an 'import' scope to the JWT auth service.

Changelog: added