Add support for Tanzu Mission Control's required AWS IAM permissions

[randomvariable]

(This is used to request new product features)

Describe the feature request

Tanzu Mission Control's cluster agent requires extra read only permissions to AWS:

servicequotas:ListServiceQuotas
ec2:DescribeKeyPairs
ec2:DescribeInstanceTypeOfferings
ec2:DescribeInstanceTypes
ec2:DescribeAvailabiilityZones
ec2:DescribeRegions
ec2:DescribeSubnets
ec2:DescribeRouteTables
ec2:DescribeVpcs
ec2:DescribeNatGateways
ec2:DescribeAddresses
elasticloadbalancing:DescribeLoadBalancers

For consistency across cloud providers, the cluster agent does not use a node selector, so the IAM permissions need to be added to every node until such a time until some form of workload identity exists, so some mechanism to add it to the nodes role is required.

Proposal is to do the following:

• Update tanzu management-cluster permissions aws set with a --enable-tmc-permissions flag to automatically add these or update an existing set of IAM roles for current 1.4.0 installs.
• Respect TMC_REGISTRATION_URL or setting the TMC integration via the UI to automatically add the permissions
• Update the print out of the UI command as per UI - AWS CLI command equivalent should include Cloudformation stack command if selected #848 when the above are set.

Describe alternatives you've considered

Affected product area (please put an X in all that apply)

• APIs
• Addons
• CLI
• Docs
• Installation
• Plugin
• Security
• Test and Release
• User Experience

Additional context