Add a role for security auditor

[myname-is-joe]

Is your feature request related to a problem? Please describe.
For users that have a security but not an admin role, having a dedicated security role with only the necessary permissions is preferable

Describe the solution you'd like
A role with permissions to manage security issues for a project, but not actions such as deleting images

Describe the main design/architecture of your solution
Desired permissions:
See the project configurations
See a list of project members
See a list of project logs
See a list of project labels
See a list of repositories
See a list of images
Pull image
Scan image **not delete though
See a list of image vulnerabilities
See image build history
See a list of helm charts
Download helm charts
See a list of helm chart versions
Download helm chart versions
See a list of project robots
See configured CVE whitelist
Create/edit/remove CVE whitelist
Create/delete tag retention rules
Enable/disable tag retention rules

Additional context
This would allow security teams to function and minimize potential issues by giving them too broad permissions

[reasonerjt]

Instead of adding new roles, we should enhance Harbor to allow creating new customized roles?

[tostt]

This is an expanded version of a proposal I made earlier for the CISO.
This feature is a must in a corporate/enterprise setting.