Refactor permissions.md

• Move permissions/permissions.md to user/permissions.md
• Remove wrong assumptions about group visibility
• Merge CI ci/permissions/README.md to user/permissions.md

What are the relevant issue numbers?

Resolves https://gitlab.com/gitlab-org/gitlab-ce/issues/19414