[epic] Permission validation preflight stage 2

[trgeiger]

After stage 1 of the permissions validation preflight epic is complete, the next stage will be to add API fields that hold structured permissions data.

There are more details in the phase 1 RFC.

References:

1: https://github.com/carvel-dev/kapp/tree/develop/pkg/kapp/permissions

Brief: https://docs.google.com/document/d/1fCkUaaXebfF1237iRrFC-F7HNNe7-TFeXpN0wSUdiXc/edit?usp=sharing
RFC: https://docs.google.com/document/d/1W7ThVE7yAd43IW1KETAB9x8pQqIRu7Dqs7jZi5QjQaM/edit?usp=sharing

sub-issues:

• Decouple Pre-Authorizer from Component-Specific Permission Requirements #1911