docs: add IAM permissions guide and policy files

Add PERMISSIONS.md covering enterprise IAM setup for the AgentCore CLI,
including admin setup instructions, CDK bootstrap configuration,
permission boundaries, feature-based scoping, and a full action-by-action
reference. Includes ready-to-use JSON policy documents for both the
developer role and the CloudFormation execution role.

Author: tejaskash