script for enabling service apis, roles

[carise]

Docs will be updated in a separate PR

The manual gcp and local setup makes the user copy and paste (and then edit) the gcloud command for each API and role. Also, there is the confusion of what to do when the user is not an org admin.

This script does the following:

1. Assign the APIs (we pull the API list from the setup wizard)
2. Based on whether user specifies an org id, folder id, or project id, assign the roles on that hierarchy level. (also pulls the roles list from the setup wizard)
3. Also allows user to specify the type of member to assign the role for (user, group, service account). This allows the user some flexibility if they are installing locally (i.e. probably don't care to create a separate service account for development; we aren't even instructing the user how to activate the service account) or on GCP (in which case it makes sense to use the service account)

[codecov]

Codecov Report

Merging #792 into dev will decrease coverage by <.01%.
The diff coverage is n/a.

@@           Coverage Diff            @@
##             dev    #792      +/-   ##
========================================
- Coverage   84.9%   84.9%   -0.01%     
========================================
  Files        171     169       -2     
  Lines       9078    9076       -2     
========================================
- Hits        7708    7706       -2     
  Misses      1370    1370

Impacted Files	Coverage Δ
...ogle/cloud/security/notifier/pipelines/__init__.py
google/cloud/security/notifier/__init__.py

[blueandgold]

Great idea! On the documentation, we still want to leave the the manual steps for folks who want to roll up sleeves and do their own configurations.