feat: allow unauthenticated access to list of configs

azulrequested to merge
8800-hand-out-configs-json-without-authentication into master

This should simplify client code significantly according to platform#8849 (closed)

Closes #8800 (closed)

Merge request reports