Upgrade to new permissions format

This upgrades gds-sso to 3.0.0, which handles both Hash and Array format
from signon. Signon currently supplies Hash, but once all apps are upgraded,
we will change it to emit an Array.