feat(particle-vault)!: introduce new particle vault path format

[kmd-fl]

Description

Introduce new particle vault features: new path format and write-only /tmp/vault

Motivation

Need to secure the particle vault to prevent unauthorized access to the vaults of others since we map shared vault directory into services (due to marine limitation)

Proposed Changes

1. Use worker-id (host-id on host) as a part of the particle vault name
2. In marine service, map /tmp/vault -> vault_dir/$worker_id
3. Store particle_token in Actor to be able to clean the vault (:c)
4. The vault name format now is /tmp/vault/$particle-id-$particle-token/
5. Create a worker vault with write-only permission and a particle vault with RW permission for the cleanup procedure (it can't remove a directory recursively without the read permission). I create it on each service creation since it's the easiest place, but we'll need to move it
6. Note that Worker Particle Vault won't be cleared, and if a worker is removed, the directory remains. It should be fixed with the ephemeral feature, I guess.
7. Also, fix the problem with Spell KV Restriction: deployer can't re-deploy a spell due to the lack of privileges

Additional Notes

TODO:

• need to use new aqua-ipfs that use the updated particle vault path format feat!: Support CallParameters and Particle Vault File Format aqua-ipfs#165
• need to merge updated Installation Spell fix(vault): use vault only on host in IS spell#276
• need to use new decider with updated Installation Spell feat: update Installation Spell  decider#236
• manually check the ls problem:
  - I created a simple service that does fs::read_dir("/tmp/vault"), it returned Permission denied.
  - I tried to call set_readonly("/tmp/vault", ..), and the result was the error: operation not supported on this platform
  - I tried to use PermissionsExt to use chmod directly, and it didn't compile. So, it seems impossible to change permissions inside the service.
  - Also, ls and chmod commands are considered mounted binaries so they won't be accessible.