feat(session): Use permissions for limiting list results

The session repository can now be passed an optional set of permissions.
The permissions are used to restrict results from the repository.
Currently this only impacts the List method. This enabled the sessions
service to use a single query to retrieve sessions and replaces the
previous behavior where the session service would first request all
sessions for a given set of scopes, evaluate the permissions, and then
request sessions based on a set of session ids.

internal/db/schema/migrations/oss/postgres/50/01_session_list_index.up.sql

@@ -0,0 +1,11 @@
+begin;
+  -- Partial index to aid session list requests
+  --
+  -- If a session list request is made using the default list request options
+  -- and using the standard grants created by boundary by default,
+  -- it will include where clauses that:
+  --  * include a project_id paired with a user_id
+  --  * and where termination_reason is null
+  create index session_list_pix on session (project_id, user_id, termination_reason) where termination_reason is null;
+  analyze session;
+end;