[Fixes #14219] Implement permissons diffing

[giohappy]

No description provided.

[gemini-code-assist]

Code Review

This pull request introduces a structured mechanism for diffing and patching resource permissions by adding a diff method to PermSpecCompact and implementing the PermSpecCompactDiff class. The patch_perms utility and the resource permissions API view were updated to utilize this new logic. Review feedback identified a high-severity issue where missing buckets in a permission spec are incorrectly treated as removals, potentially breaking partial updates. Additionally, an optimization was suggested for the apply method to improve the efficiency of adding new permission entries.

[codecov]

Codecov Report

❌ Patch coverage is 98.46939% with 3 lines in your changes missing coverage. Please review.
✅ Project coverage is 74.76%. Comparing base (a9ac0a2) to head (1346e30).
⚠️ Report is 17 commits behind head on master.

Additional details and impacted files

@@             Coverage Diff             @@
##           master   #14218       +/-   ##
===========================================
+ Coverage   43.23%   74.76%   +31.53%     
===========================================
  Files         960      967        +7     
  Lines       58824    59351      +527     
  Branches     8018     8069       +51     
===========================================
+ Hits        25432    44375    +18943     
+ Misses      32113    13169    -18944     
- Partials     1279     1807      +528     

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.