feat(spec,core)!: positions declare their permissionSets; the authorization resolver reads the security catalog and the activation ledger

feat(spec,core)!: positions declare their permissionSets; the authorization resolver reads the security catalog and the activation ledger #32393