feat: support additional management policy combination

[man-ish-k]

Description of your changes

Add two new management policy combinations to support safer resource importing and external lifecycle management scenarios:

1. Import Mode: A new policy combination that allows safe importing of existing resources by only permitting observation and late initialization, without making any changes to the external resource.

   • Actions: [Observe, LateInitialize]
   • Use case: Safely discover and import existing cloud resources into Crossplane without risk of modifying them

2. External Lifecycle Management: A policy combination for resources whose lifecycle (creation/deletion) is managed outside of Crossplane, but allows Crossplane to make updates and track state.

   • Actions: [Observe, Update, LateInitialize]
   • Use case: Integration with external provisioning systems while maintaining Crossplane's ability to manage resource configuration

Fixes #681,

I have:

• Read and followed Crossplane's contribution process.
• Run earthly +reviewable to ensure this PR is ready for review.
• Added or updated unit tests.
• Linked a PR or a docs tracking issue to document this change.
• Added backport release-x.y labels to auto-backport this PR.

Need help with this checklist? See the cheat sheet.