Implicit permissions given to roles from the "Authenticated" role aren't respected

Problem/Motivation

When using an OAuth client that uses a dynamic scope based upon a user role, If that role has an implicit permission applied to it, it will no longer be respected

Steps to reproduce

1. Create an OAuth Scope with a role granularity, with a role of anything other than anonymous or authenticated
1. Apply the permission "access content" to the "Authenticated User" role and not that selected role
2. Attempt to view a node / taxonomy item via the JSON API using an OAuth access token
3. 403 will be returned

Proposed resolution

The original Drupal\simple_oauth\Plugin\ScopeGranularity\Role::hasPermission() function will check both the users role and AccountInterface::AUTHENTICATED_ROLE to see if the permission exists when the role being checked wasn't anonymous or authenticated, but in the refactored version, the new getRoles() function doesn't do this and will only check the explicit role of the scope.

Adding AccountInterface::AUTHENTICATED_ROLE to the returned roles when the role isint Anonymous or Authenticated in the new Drupal\simple_oauth\Plugin\ScopeGranularity\Role::getRoles() function solves this issue.