Limit which Salt states can be executed by the storage-operator

[slaperche-scality]

Component:

salt

Why this is needed:

Currently the storage-operator is allowed to execute state.sls which is too wide (it can run any kind of states).
Processes should only have the minimum permissions to allow them to do their job, not more.

What should be done:

Update the ACL for the storage-operator account in salt/metalk8s/salt/master/files/master-99-metalk8s.conf.j2.

Implementation proposal (strongly recommended):

We should limit which states can be given to state.sls, using this feature.

Test plan:

Try to run arbitrary Salt state while using storage-operator credentials: it should fails.