document permission requirements

[otakup0pe]

aomi does have some minimal permission requirements, namely being able to view mounts, and ideally create it's operational tokens. this should be documented in a clear way, with sample policies.

care should be given to also document requirements around modifying mount points, auth/secret backends, and logs.