Upgrade to Panda v7 - support key rotation

This upgrades Panda from v4 to v7, allowing us to use key rotation as introduced with guardian/pan-domain-authentication#150.

app/controllers/BaseFaciaController.scala

@@ -1,10 +1,9 @@
 package controllers
 
 import java.util.Locale
-
 import com.gu.pandomainauth.action.{AuthActions, UserRequest}
 import com.gu.pandomainauth.model.AuthenticatedUser
-import com.gu.pandomainauth.{PanDomain, PanDomainAuthSettingsRefresher}
+import com.gu.pandomainauth.{PanDomain, PanDomainAuthSettingsRefresher, S3BucketLoader}
 import com.gu.permissions.{PermissionsConfig, PermissionsProvider}
 import conf.ApplicationConfiguration
 import logging.Logging
@@ -30,12 +29,10 @@ abstract class BaseFaciaControllerComponents(context: Context)
   def config: ApplicationConfiguration
 
   lazy val panDomainSettings: PanDomainAuthSettingsRefresher =
-    new PanDomainAuthSettingsRefresher(
-      config.pandomain.domain,
-      config.pandomain.service,
-      config.pandomain.bucketName,
-      config.pandomain.settingsFileKey,
-      config.aws.s3Client
+    PanDomainAuthSettingsRefresher(
+      domain = config.pandomain.domain,
+      system = config.pandomain.service,
+			S3BucketLoader.forAwsSdkV1(config.aws.s3Client, "pan-domain-auth-settings")
     )
 
   lazy val permissions = PermissionsProvider(

build.sbt

@@ -85,7 +85,7 @@ libraryDependencies ++= Seq(
   "com.gu" %% "editorial-permissions-client" % "3.0.0",
   "com.gu" %% "fapi-client-play30" % "13.0.0",
   "com.gu" %% "mobile-notifications-api-models" % "3.0.0",
-  "com.gu" %% "pan-domain-auth-play_3-0" % "4.0.0",
+  "com.gu" %% "pan-domain-auth-play_3-0" % "7.0.0",
   "org.scanamo" %% "scanamo" % "1.1.1" exclude ("org.scala-lang.modules", "scala-java8-compat_2.13"),
   "com.github.blemale" %% "scaffeine" % "4.1.0" % "compile",
   "com.gu" %% "thrift-serializer" % "4.0.2",