Convert our access policies to use the Access Policy API

Will probably fail on v2-v3 update test which needs to be removed

So as predicted the upgrade path test goes red. Will fix that first in another issue and then circle back here.

Removed the test in another issue, rerunning tests.

Fully green now. Running one last manual check before committing.

Forgot to mark one access policy as final, will do that and then merge right away.

Automatically closed - issue fixed for 2 weeks with no activity.