[FIXED JENKINS-17798] expose build badge via unprotected URL, but with new Permission

This introduces a new unprotected URL to access the build status badge. to still be able to differentiate who is allowed to access the badge, a new permission (ViewStatus) was introduced too.