Add CryoTank permissions (SYN-3773)

[mikemoritz]

• Also removed deprecated offset tracking (cannot be released until >=2.150.0)
• Includes migration to remove old tank-cell data and match guids between the cryo names and the tanks

[codecov]

Codecov Report

Patch coverage: 100.00% and project coverage change: -0.10% ⚠️

Comparison is base (23402e7) 97.27% compared to head (8565f13) 97.17%.

Additional details and impacted files

@@            Coverage Diff             @@
##           master    #3328      +/-   ##
==========================================
- Coverage   97.27%   97.17%   -0.10%     
==========================================
  Files         228      228              
  Lines       46503    46515      +12     
==========================================
- Hits        45234    45202      -32     
- Misses       1269     1313      +44     

Flag	Coverage Δ
linux	97.17% <100.00%> (+<0.01%)	⬆️
linux_replay	?

Flags with carried forward coverage won't be shown. Click here to find out more.

Files Changed	Coverage Δ
synapse/cryotank.py	98.51% <100.00%> (+6.93%)	⬆️

... and 13 files with indirect coverage changes

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

[MichaelSquires]

Should we override _getPermDefs() on the CryoCell to list the cryotank permissions?

cryo.tank.read
cryo.tank.put
cryo.tank.add

[mikemoritz]

Should we override _getPermDefs() on the CryoCell to list the cryotank permissions?

cryo.tank.read cryo.tank.put cryo.tank.add

Added