Health data governance in digital health in the Brazilian context: ethical-legal limits between informational autonomy and surveillance capitalism