[STR-1307] fix: add ViewProduct policy for catalog-graphql

[iago1501]

What problem is this solving?

From catalog-graphql 1.108 on, the app token must be authorized with View* policies. The return-app calls catalog-graphql (sku query, to translate SKU names) with ctx.authToken but only declared vtex.catalog-graphql:resolve-graphql. Same fix applied in broadcaster-worker: vtex-apps/broadcaster-worker#36

Only ViewProduct is added, since the query reads only the SKU name (no brand/category).

How to test it?

Link the branch and open a flow that triggers SKU name translation; confirm no 403 from catalog-graphql.

[Workspace](Link goes here!)

Screenshots or example usage:

N/A

Describe alternatives you've considered, if any.

If ViewProduct is not enough, also add ViewBrand and ViewCategory as in broadcaster-worker.

Related to / Depends on

vtex-apps/broadcaster-worker#36

[vtex-io-ci-cd]

Hi! I'm VTEX IO CI/CD Bot and I'll be helping you to publish your app! 🤖

Please select which version do you want to release:

• Patch (backwards-compatible bug fixes)

• Minor (backwards-compatible functionality)

• Major (incompatible API changes)

And then you just need to merge your PR when you are ready! There is no need to create a release commit/tag.

• No thanks, I would rather do it manually 😞

[vtex-io-docs-bot]

Beep boop 🤖

I noticed you didn't make any changes at the docs/ folder

• There's nothing new to document 🤔
• I'll do it later 😞

In order to keep track, I'll create an issue if you decide now is not a good time

• I just updated 🎉🎉

[mendescamara]

[vtex-io-ci-cd]

Your PR has been merged! App is being published. 🚀
Version 3.11.1 → 3.11.2

After the publishing process has been completed (check #vtex-io-releases) and doing A/B tests with the new version, you can deploy your release by running:

vtex deploy vtex.return-app@3.11.2

After that your app will be updated on all accounts.

For more information on the deployment process check the docs. 📖