add missing permission checks, move non-preflight resources to correct packages

[moesterheld]

Description

• removes an unused rest resource
• moves "regular" ca/certificate renewal endpoints into regular Graylog package structure
• add missing permissions and annotations
• add dummy permission not available in Graylog to preflight resources to make sure they are not accidentally exposed by binding them there

/nocl

Motivation and Context

fixes #18854

How Has This Been Tested?

Screenshots (if appropriate):

Types of changes

• Bug fix (non-breaking change which fixes an issue)
• New feature (non-breaking change which adds functionality)
• Refactoring (non-breaking change)
• Breaking change (fix or feature that would cause existing functionality to change)

Checklist:

• My code follows the code style of this project.
• My change requires a change to the documentation.
• I have updated the documentation accordingly.
• I have read the CONTRIBUTING document.
• I have added tests to cover my changes.

[todvora]

LGTM! Thanks!