SPIKE: Which custom permissions are most necessary to run jobs

Related proposal: https://gitlab.com/gitlab-com/content-sites/handbook/-/blob/e015cbf6cc776f74c0e5f0fad8cfe96b4bcf246e/content/handbook/engineering/architecture/design-documents/ci_job_token/_index.md#proposal

Resources

• Add new endpoints to fine-grained permissions f... (gitlab-org&6310 - closed)
• https://gitlab.com/gitlab-org/gitlab/blob/19651b13174d4539f70713f288ee5595774bda04/app/policies/project_policy.rb#L765-787