Bugfest. /inventory/instances/{id} API missing required module permissions

Overview:

The /inventory/instances/{id} API requires the module permissions inventory-storage.items.collection.get and inventory-storage.holdings.collection.get in order to return successfully.

Steps to Reproduce:

1. On folio-snapshot, create a user with only the permission inventory.instances.item.get. This should allow access to the /inventory/instances/{id} endpoint.
2. Using an API testing tool (e.g. curl or Postman), log into folio-snapshot-okapi to retrieve a token
3. Using the API testing tool, do a GET to /inventory/instances/{id}

Expected Results:
You should see the composite instance record as retrieved by mod-inventory
Actual Results:
The request hangs. Okapi log shows the error:

2021-09-15T14:15:10,055	INFO	ProxyContext	957000/inventory;116992/item-storage RES 403 933us mod-authtoken-2.8.0 http://mod-authtoken-2-8-0:8081/item-storage/items?query=holdingsRecordId%3D%3D%28%228207c023-b720-510b-9d61-216c24ed5399%22%29&limit=2147483647&offset=0	

Additional Information:
After assigning the inventory-storage.items.collection.get and inventory-storage.holdings.collection.get permissions to the user, the API call succeeds.

Interested parties:
nielserik mikegorrell