Add `userPermissions` to `Runner`

Description

1. Add a userPermissions field to Runner in the GraphQL API to inform users if they are able to update the runner.
2. Possible suggested fields: readRunner updateRunner adminRunner (incl. delete) for each respective operation.

Use case

In #19819 (closed) non-admin users of a group may or may not be able to update a runner's information of each runner. The UI should hide/show relevant actions for each runner: