[3.x] Update permissions for viewing and clearing manager actions log

[muzzwood]

What does it do?

• Removes the non-specific logs permission
• Adds mgr_log_view permission
• Adds mgr_log_erase permission
• Includes these two new permissions in the Administrator and Developer policies.

I went with these names rather than the ones suggested in the issue so that they are uniform with the error log permissions.

Why is it needed?

This will allow a user to view the manager actions log but not clear it.

How to test

1. Re-run setup to get the new permissions installed
2. Log in with users with different access to attempt viewing and clearing the manager access log.

Related issue(s)/PR(s)

Closes #15739

[JoshuaLuckers]

Do we need to remove the logs permission in an upgrade script?

[muzzwood]

Thanks @JoshuaLuckers - done!

[opengeek]

Hmm. Does this really need to be held until 3.1? If so, then the upgrade script needs to be targeted at 3.1 instead of 3.0.

[Mark-H]

Felt more like a feature than a fix, but I'm certainly more than happy to see it in rc2 as well.

[opengeek]

Since I don't believe this would affect any extras, I think it makes more sense to just bring it in for RC2 if no one else has objections.

[muzzwood]

Fine with me! :)