feat(perms): log all permissions and access

[avivkeller]

Fixes #4
Fixes #21

cc @nodejs/web @nodejs/security-wg - Feel free to modify this file with additional permissions and/or changes

[Copilot]

Pull Request Overview

This PR creates a comprehensive permissions documentation file that maps access levels for repositories, external services, and access tokens across different Node.js web teams and roles.

• Introduces a structured permissions matrix documenting access levels for 9 repositories across 5 different team roles
• Documents external service permissions for 7 services including Cloudflare, Vercel, and Sentry
• Creates an access tokens section tracking service account credentials and their permissions

---

_{Tip: Customize your code reviews with copilot-instructions.md. Create the file or learn how to get started.}

[avivkeller]

I added everything I am aware of, however, there may be inaccuracies

[AugustinMauroy]

Missing piece:

• npm publish oidc (I think it's owned by tsc)
• maybe not in this doc but it's "related" list which npm package we publish.

[AugustinMauroy]

Btw thanks aviv to tackle it 🫶🏻

[ovflowd]

bump, @avivkeller

[ovflowd]

cc @nodejs/web-infra can y'all do a last review here to see if I missed anything, specifically on repo perms?

[avivkeller]

cc @nodejs/web-infra can y'all do a last review here to see if I missed anything, specifically on repo perms?

fwiw I pulled directly from https://github.com/orgs/nodejs/teams/web/repositories

[ovflowd]

SGTM!