Define two new permissions to guard role-based access to AppSearch.

See go/role-permission-protection-guide for more details.

These permissions are used to enforce role-based access in AppSearch.
Data provider could set which role/premission is required to query their
data.

Bug: 202194495
Test: presubmit
Change-Id: I7123e697816af2f7ccc18676142eb710daa83d9a