chore: remove rbac psuedo resources, add custom verbs (#13276)

Removes our pseudo rbac resources like `WorkspaceApplicationConnect` in favor of additional verbs like `ssh`. This is to make more intuitive permissions for building custom roles.

The source of truth is now `policy.go`

docs/api/authorization.md

@@ -25,7 +25,7 @@ curl -X POST http://coder-server:8080/api/v2/authcheck \
         "organization_id": "string",
         "owner_id": "string",
         "resource_id": "string",
-        "resource_type": "workspace"
+        "resource_type": "*"
       }
     },
     "property2": {
@@ -34,7 +34,7 @@ curl -X POST http://coder-server:8080/api/v2/authcheck \
         "organization_id": "string",
         "owner_id": "string",
         "resource_id": "string",
-        "resource_type": "workspace"
+        "resource_type": "*"
       }
     }
   }