feat: Implement allow_list for scopes for resource specific permissions (#5769)

* feat: Implement allow_list for scopes for resource specific permissions

Feature that adds an allow_list for scopes to specify particular resources.
This enables workspace agent tokens to use the same RBAC system as users.

- Add ID to compileSQL matchers
* Plumb through WithID on rbac objects
* Rename Scope -> ScopeName
* Update input.json with scope allow_list

Co-authored-by: Cian Johnston <cian@coder.com>

coderd/rbac/input.json

@@ -1,6 +1,7 @@
 {
   "action": "never-match-action",
   "object": {
+    "id": "9046b041-58ed-47a3-9c3a-de302577875a",
     "owner": "00000000-0000-0000-0000-000000000000",
     "org_owner": "bf7b72bd-a2b1-4ef2-962c-1d698e0483f6",
     "type": "workspace",
@@ -24,7 +25,8 @@
         }
       ],
       "org": {},
-      "user": []
+      "user": [],
+      "allow_list": ["*"]
     }
   }
 }