[v11.0.x] Alerting: Add two sets of provisioning actions for rules and notifications

[grafana-delivery-bot]

Backport 356a295 from #87149

---

What is this feature?
This PR adds two new sets of permissions that let administrators create custom roles to grant access to provisioning alert rules and notification configurations separately.
It does not replace already existing permissions.

Why do we need this feature?
To allow Grafana Enterprise users to grant access to rules API but not notifications provisioning APIs

Who is this feature for?

Special notes for your reviewer:
The new actions are not exposed independently. To test, you need to create a new custom role.

Example API Call

curl --location 'http://localhost:3000/api/access-control/roles' \
--header 'Content-Type: application/json' \
--header 'Authorization: Basic YWRtaW46YWRtaW4=' \
--data '{
    "version": 1,
    "name": "custom:alerting_rule_provisioner",
    "displayName": "Alert Rules Provisioner",
    "description": "Access only alert rule provisioning API",
    "group":"Alerting",
    "permissions": [
        {
            "action": "alert.rules.provisioning:read"
        },
        {
            "action": "alert.rules.provisioning:write"
        }
    ]
}
'

Then you can create a test user

Example API Call

curl --location 'http://localhost:3000/api/admin/users' \
--header 'Content-Type: application/json' \
--header 'Authorization: Basic YWRtaW46YWRtaW4=' \
--data-raw '{
    "name": "test",
    "email": "test@example.com",
    "login": "test",
    "password": "test"
}'

and then assign the new role to the user (user Id and role UID need to be replaced with values from responses)

Example API Call

curl --location --request PUT 'http://localhost:3000/api/access-control/users/2/roles' \
--header 'Content-Type: application/json' \
--header 'Authorization: Basic YWRtaW46YWRtaW4=' \
--data '{"orgId":1,"roleUids":["bdl6zemr9r9xcd"]}'

Please check that:

• It works as expected from a user's perspective.
• If this is a pre-GA feature, it is behind a feature toggle.
• The docs are updated, and if this is a notable improvement, it's added to our What's New doc.