Add refrences API

[mjudeikis]

Summary

• Add PermissionClaims.References api with jsonPath
• Make permission claims OR'ed (it was AND'ed now)
• Fix provider to consumer object namespace syncing
• Rework kcp user-facing docs
• Refactor tests more to reuse existing examples so we have less yaml to maintain

References api example:

  permissionClaims:
  - group: ""
    resource: secrets
    selector:
      labelSelector:
        matchLabels:
          app: sheriff
      references:
        - resource: sheriffs
          group: wildwest.dev
          jsonPath:
            name: spec.secretRefs.#.name
            namespace: spec.secretRefs.#.namespace

What Type of PR Is This?

/kind feature
/kind api-change

Related Issue(s)

Fixes #

Release Notes

Reference api for PermissionClaims
Make permissionClaims OR'ed vs AND'ed now
Fix namespace re-map from provider to consumer