Implement secure RBAC for service status
Implement secure RBAC for service status

This commit updates the policies for service status to understand
scope checking and account for a read-only role. This is part of a
broader series of changes across OpenStack to provide a consistent
RBAC experience and improve security.

Change-Id: I11c3d7ec8dc871338db7fcd3746e56516683ecd1

openstack/designate,openstack/designate,openstack/designate