Add workflow cluster permissions to alerting roles

[eirsep]

Description

Adds cluster permissions for alerting workflows to alerting roles

alerting_read_access role is mapped additionally to
'cluster:admin/opensearch/alerting/workflow/get' and cluster:admin/opensearch/alerting/workflow_alerts/get'

alerting_ack_alerts is mapped to 'cluster:admin/opendistro/alerting/workflow_alerts/*` and 'cluster:admin/opendistro/alerting/chained_alerts/*'

These roles are merged in https://github.com/opensearch-project/common-utils/blob/main/src/main/kotlin/org/opensearch/commons/alerting/action/AlertingActions.kt#L9-L20

Issues Resolved

[List any issues this PR will resolve]

Is this a backport? If so, please add backport PR # and/or commits #

Testing

[Please provide details of testing done: unit testing, integration testing and manual testing]

Check List

• New functionality includes testing
• New functionality has been documented
• Commits are signed per the DCO using --signoff

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.
For more information on following Developer Certificate of Origin and signing off your commits, please check here.

[codecov]

Codecov Report

Merging #2994 (8053387) into main (ab6778d) will decrease coverage by 0.17%.
The diff coverage is n/a.

@@             Coverage Diff              @@
##               main    #2994      +/-   ##
============================================
- Coverage     62.49%   62.32%   -0.17%     
+ Complexity     3378     3369       -9     
============================================
  Files           267      267              
  Lines         19774    19774              
  Branches       3355     3355              
============================================
- Hits          12357    12325      -32     
- Misses         5776     5806      +30     
- Partials       1641     1643       +2     

see 8 files with indirect coverage changes

[cwperks]

@eirsep Can you please re-base this PR with main?

This PR was included directly into 2.9 in this PR, but still needs to be merged into main and 2.x

[cwperks]

@eirsep Checking in, can you rebase this branch with main?

This PR was included directly into 2.9 in this #2996, but still needs to be merged into main and 2.x