Add admin_cicd_variables custom ability

What does this MR do and why?

This allows admin access to CI/CD variables as a customizable ability, so that it can be added onto any base role.

This adds the policy. The policy is applied in other MR's (here and here).

Issue: #437947 (closed)