Enable Firefighter by issue request and labels

A way for a team member to request FF to their tenancy

- on an issue, only a member can request
- another member of the team can approve
- a request can timeout
- once approved, FF is provided for 8 hours

while in FF we need it to trigger access across the landscape correctly

(note CRD)