Add an atomic permission to retrieve a blob from S3 Glacier

Description

As a Nuxeo integrator, I want the transfer to Glacier to be linked to an atomic permission, so that I can customise the user permissions depending on the project needs.

By default, this new atomic permission is added to the "Write" role.

Acceptance criteria

• When I use the MoveToColdStorage operation transfer content to S3 Glacier, the main file is moved to S3 Glacier (S3 storage class changed to S3 Glacier)
• When I use the MoveToColdStorage operation with a user granted with WriteColdStorage permission, I can transfer the main file of a document to S3 Glacier,
• When I use the MoveToColdStorage operation with a user with write permission and without WriteColdStorage permission, I can’t transfer the main file of a document to S3 Glacier,
• When I use the MoveToColdStorage operation with an administrator, I can transfer the main file of a document to S3 Glacier,