[Feature]: Developers should not be able to create orgs

[gcapizzi]

Background

As an admin
I want to be the only one able to create orgs
So that I can keep my org structure under control

Acceptance Criteria

GIVEN I am not an Admin
WHEN I try to POST /v3/organizations
THEN I should get the following response:

HTTP/1.1 403 Forbidden
Content-Type: application/json

{
  "errors": [
    {
      "code": 10003,
      "title": "CF-NotAuthorized",
      "detail": "You are not authorized to perform the requested action"
    }
  ]
}

GIVEN I am an Admin
WHEN I try to POST /v3/organizations
THEN I should get a successful response

Dev Notes

• This could trigger the creation of an Admin ClusterRole, to be bound in the root namespace so that it propagates to all orgs and spaces.