Implement project personas in custom ironic policy file
Implement project personas in custom ironic policy file

This commit updates the ironic default policies in
enable-secure-rbac.yaml to implement project personas (project-admin,
project-member, and project-reader) to be consistent across OpenStack
services. The project-admin is still considered a system adminsitrator.

This behavior will change in future releases when more OpenStack
services adopt system-scope. At that time, we can go back and use the
default ironic policies that implement system and project personas.

Change-Id: Id419f2e695d9510178c0ece6fc8777e52c30198c

openstack/tripleo-heat-templates,openstack/tripleo-heat-templates