Allow unauthenticated access to some Branch API GET endpoints

What does this MR do?

This opens-up unauthenticated access to branches API GET (/branches and /branches/:branch) endpoints.

Does this MR meet the acceptance criteria?

• Changelog entry added, if necessary
• Documentation created/updated
• API support added
• Tests
  • Added for this feature/bug
  • All builds are passing
• Conform by the merge request performance guides
• Conform by the style guides
• Branch has no merge conflicts with master (if it does - rebase it please)
• Squashed related commits together

What are the relevant issue numbers?

Closes #29662 (closed)