refactor(iam): declare UA agent permissions via the core manifest

Move agent.ua.create/issue_key out of a DB migration and into
core.yaml.j2's $core.iam.permissions, matching how other elements
(e.g. exordos_world) already declare permissions in their own
manifests, and per review feedback on PR #517 that permission data
is moving away from migrations. Permission/Role/PermissionBinding
already support this via TargetResourceMixin.

Author: VasilyStepanov

exordos/manifests/core.yaml.j2

@@ -5,6 +5,16 @@ version: "{{ version }}"
 api_version: "v1"
 
 resources:
+
+  # IAM
+  $core.iam.permissions:
+    ua_agent_create:
+      name: "agent.ua.create"
+      description: "Register a Universal Agent"
+    ua_agent_issue_key:
+      name: "agent.ua.issue_key"
+      description: "Issue or fetch a Universal Agent node encryption key"
+
   $core.vs.profiles:
     develop:
       name: "develop"