Add needed immich API permissions to documentation

[sebingel]

Through trial and error, I figured out which permission the API key for immich needs (at least in my use case):

• asset.read
• asset.statistics
• asset.update
• asset.upload
• asset.replace
• album.read
• album.create
• albumAsset.create
• job.create
• job.read
• server.about
• stack.create
• tag.create
• tag.asset
• user.read

to save other users from trying this out, I would suggest to add a list of needed permissions to the documentation.

[Qhilm]

I tested this as well, it worked for me too. (50k pictures imported from google takeout)

I used a non-admin user, but I didn't think of only assigning job.create and job.read to the admin's API key.

[Qhilm]

Added #1048 for this