Organization level agent authorization
## Description
Following from this investigation:
gitlab-org/gitlab#463455+
TLDR:
We aimed for an instance-level cluster-agent access but opted for something forward-compatible with cells and organizations i.e Organizational level cluster-agent access. In a non-cells world, this gives the "instance-level" feel since there is only a single default org that all namespaces are under.
epic