Add iam org policy commands

[kobajagi]

Description

This PR adds IAM Org Policy commands: exo iam org-policy show, exo iam org-policy replace and exo iam org-policy reset.

$ go run . iam org-policy 
IAM Organization Policy management

Usage:
  exo iam org-policy [command]

Available Commands:
  replace     Replace Org policy
  reset       Reset Org policy to default
  show        Show Org policy details
...

Checklist

(For exoscale contributors)

• Changelog updated (under Unreleased block)
• Testing

Testing

Show command

$ go run  . iam org-policy show
┼─────────┼─────────────────────────────────┼─────────────┼─────────────────────────────────────────────────────────────────────────────────────┼
│ SERVICE │ TYPE (DEFAULT STRATEGY "ALLOW") │ RULE ACTION │                                   RULE EXPRESSION                                   │
┼─────────┼─────────────────────────────────┼─────────────┼─────────────────────────────────────────────────────────────────────────────────────┼
│ sos     │ rules                           │ allow       │ operation in ['list-sos-buckets-usage', 'list-buckets']                             │
│         │                                 │ deny        │ !(resources.bucket in ['my-bucket', 'my-other-bucket'])                             │
│         │                                 │ allow       │ operation in ['list-objects', 'get-object']                                         │
│         │                                 │ deny        │ operation in ['get-bucket-acl', 'get-bucket-cors', 'get-bucket-ownership-controls'] │
│ cdn     │ deny                            │             │                                                                                     │
┼─────────┼─────────────────────────────────┼─────────────┼─────────────────────────────────────────────────────────────────────────────────────┼

Replace

$ go run . iam org-policy show --output-format json | jq 'del(.services.sos)' | go run . iam org-policy replace
┼─────────┼─────────────────────────────────┼─────────────┼─────────────────┼
│ SERVICE │ TYPE (DEFAULT STRATEGY "ALLOW") │ RULE ACTION │ RULE EXPRESSION │
┼─────────┼─────────────────────────────────┼─────────────┼─────────────────┼
│ cdn     │ deny                            │             │                 │
┼─────────┼─────────────────────────────────┼─────────────┼─────────────────┼

Reset

$ go run . iam org-policy reset
[+] This action will remove any resource constrains you may had set in your Org Policy. Proceed? [yN]: y
$ go run . iam org-policy show
┼─────────┼─────────────────────────────────┼─────────────┼─────────────────┼
│ SERVICE │ TYPE (DEFAULT STRATEGY "ALLOW") │ RULE ACTION │ RULE EXPRESSION │
┼─────────┼─────────────────────────────────┼─────────────┼─────────────────┼
┼─────────┼─────────────────────────────────┼─────────────┼─────────────────┼

[shortcut-integration]

This pull request has been linked to Shortcut Story #68211: IAMv3 Tooling.