Restricting participant to deploy/upload Daml contract

Questions
,
3

Use mock-oauth2-server with Canton Ledger API includes a sample which enables JWT authorization. You may find that a helpful reference.