Support read-config k9 access capability

Add support for the read-config k9 access capability:

• read-config is documented at https://k9security.io/docs/k9-access-capability-model/
• reclassify many read-data and some administer-resource actions to read-config