add ACL support for health checks controller

[kschoche]

Changes proposed in this PR:

• server-acl-init will now add additional rules for the connect-inject-webhook when ACLs and health checks are enabled.
• deprecate -create-inject-auth-method
• deprecate -create-inject-namespace-token. This flag was always passed when -enable-namespaces was true so now we just look at-enable-namespaces and -create-inject-token
• undeprecate -create-inject-token. This will always be passed by helm if connect inject is enabled.
• move all namespaced server-acl-init/command_test.go tests that used -create-inject-namespace-token from oss to ent as these are now invalid for oss (they always were but they got away with being in oss because they weren't passing -enable-namespaces
• tests to validate backwards compatibility are added and coverage for new flags.

How I've tested this PR:
unit tests + some manual testing of the command flags

How I expect reviewers to test this PR:
run the unit tests and try out the full stack by grabbing
hashicorp/consul-helm#665

This table summarizes what helm would pass with versions <= 0.25.0 (old) and > 0.25.0 (new):

	Enable Namespaces	Enable Healthchecks	Flags Passed	Auth Method	Token	Global Token
Old	FALSE	N/A	-create-inject-auth-method	Yes	No	N/A
	TRUE	N/A	-create-inject-auth-method, -enable-namespaces, -create-inject-namespace-token	Yes	Yes	Yes
New	FALSE	FALSE	-create-inject-token	Yes	No	N/A
	TRUE	FALSE	-create-inject-token, -enable-namespaces	Yes	Yes	Yes
	TRUE	TRUE	-create-inject-token, -enable-namespaces, -enable-healthchecks	Yes	Yes	Yes
	FALSE	TRUE	-create-inject-token, -enable-healthchecks	Yes	Yes	No

Checklist:

• Tests added
• CHANGELOG entry added - this will be part of the full health checks changelog entry

[ishustava]

Looks great! I've added some comments and suggestions, but I don't think they are blocking the merge.