feat: impersonation roles (#7442)

* partial work done

* test IAM membership roles

* org membership tests

* console :(, translations and docs

* fix integration test

* fix tests

* add EnableImpersonation to security policy API

* fix integration test timestamp checking

* add security policy tests and fix projections

* add impersonation setting in console

* add security settings to the settings v2 API

* fix typo

* move impersonation to instance

---------

Co-authored-by: Livio Spring <livio.a@gmail.com>

internal/integration/client.go

@@ -34,6 +34,7 @@ import (
 	org "github.com/zitadel/zitadel/pkg/grpc/org/v2beta"
 	organisation "github.com/zitadel/zitadel/pkg/grpc/org/v2beta"
 	session "github.com/zitadel/zitadel/pkg/grpc/session/v2beta"
+	settings "github.com/zitadel/zitadel/pkg/grpc/settings/v2beta"
 	"github.com/zitadel/zitadel/pkg/grpc/system"
 	user_pb "github.com/zitadel/zitadel/pkg/grpc/user"
 	user "github.com/zitadel/zitadel/pkg/grpc/user/v2beta"
@@ -46,6 +47,7 @@ type Client struct {
 	Auth        auth.AuthServiceClient
 	UserV2      user.UserServiceClient
 	SessionV2   session.SessionServiceClient
+	SettingsV2  settings.SettingsServiceClient
 	OIDCv2      oidc_pb.OIDCServiceClient
 	OrgV2       organisation.OrganizationServiceClient
 	System      system.SystemServiceClient
@@ -61,6 +63,7 @@ func newClient(cc *grpc.ClientConn) Client {
 		Auth:        auth.NewAuthServiceClient(cc),
 		UserV2:      user.NewUserServiceClient(cc),
 		SessionV2:   session.NewSessionServiceClient(cc),
+		SettingsV2:  settings.NewSettingsServiceClient(cc),
 		OIDCv2:      oidc_pb.NewOIDCServiceClient(cc),
 		OrgV2:       organisation.NewOrganizationServiceClient(cc),
 		System:      system.NewSystemServiceClient(cc),