Decide permissions model for Bicep Extensiblity

[rynowak]

As part of #3165 we granted extensive permissions to the Bicep extensibility container so it can do its job.

We need a better approach that gives users more control in the future. The absolute minimum could be making this configurable via the helm chart. A really rich approach would be to use impersonation at the API level.

AB#6971