Add new role "web services" with required permissions #3234

#3234

### Changes

* Exports a new role "web services" as a feature component in `os.module`
* Updates existing permissions in `os.module` and `vsite.module` to add the new role
* Exports 2 new permissions in `os.module`

The existing permissions exports that are now granted to "web services" role:

1. bypass node access
1. create department content
1. create project content
1. create personal content

Newly exported permissions granted to ONLY web services role:

1. access resource node
1. access resource user