Restrict who can "Rebuild permissions" to users with the "administer site configuration" permission

Attached a patch supporting Drupal 10.0.x.

codebymikey → changed the visibility of the branch 3418353-restrict-who-can to hidden.

This would need an upgrade path to add the new permission to any role that has administer nodes so there's no access regression for existing sites. Also needs a reroll.

Updated the issue branch with changes from 11.x, added post_update hook to grant the new permission

The errors in the pipeline look to be unrelated to this issue, so I would assume MR could be reviewed now

I'm 50/50 that we should add test coverage for the update hook. We add coverage for most update hooks but this one is pretty simple.

But moving to NW as this would be a new permission to be declared.

Thanks for the feedback, @smustgrave

I added a simple test to verify that the new permission is added by the post update hook, just in case