chore: implement oom/ood processing component (#16436)

Implements the processing logic as set out in the OOM/OOD RFC.

coderd/rbac/object_gen.go

@@ -299,6 +299,7 @@ var (
 	// Valid Actions
 	//  - "ActionCreate" :: create workspace agent resource monitor
 	//  - "ActionRead" :: read workspace agent resource monitor
+	//  - "ActionUpdate" :: update workspace agent resource monitor
 	ResourceWorkspaceAgentResourceMonitor = Object{
 		Type: "workspace_agent_resource_monitor",
 	}

coderd/rbac/policy/policy.go

@@ -306,6 +306,7 @@ var RBACPermissions = map[string]PermissionDefinition{
 		Actions: map[Action]ActionDefinition{
 			ActionRead:   actDef("read workspace agent resource monitor"),
 			ActionCreate: actDef("create workspace agent resource monitor"),
+			ActionUpdate: actDef("update workspace agent resource monitor"),
 		},
 	},
 }

coderd/rbac/roles_test.go

@@ -779,7 +779,7 @@ func TestRolePermissions(t *testing.T) {
 		},
 		{
 			Name:     "ResourceMonitor",
-			Actions:  []policy.Action{policy.ActionRead, policy.ActionCreate},
+			Actions:  []policy.Action{policy.ActionRead, policy.ActionCreate, policy.ActionUpdate},
 			Resource: rbac.ResourceWorkspaceAgentResourceMonitor,
 			AuthorizeMap: map[bool][]hasAuthSubjects{
 				true: {owner},