Refactor pluginconfig

[adam-cattermole]

Changes

• Moved the domain field into the actions and renamed scope. This is the host for auth ContextExtensions and domain for ratelimit
• Started using the data field in the actions and removed the data field in rules

[adam-cattermole]

@eguzki preferred retaining the name allOf over conditions here to be explicit that all conditions must apply. I myself am of the opinion that allOf suggests there's an anyOf so prefer conditions, so would like other thoughts

[adam-cattermole]

There's an issue with our design here, we've decoupled the rules from the data and actions, which makes some configurations impossible. We likely should nest the actions within the rules - if rule applies, actions performed with relevant data.

Examples:

• Two rules, one for GET one for POST incrementing different limits
• Two rules, one for GET one for POST, where we only perform auth on POST

These two examples are not possible with the current config, as either of the two rules would match, triggering all actions with all of the data.