Automate permission granting for evaluation

The required role assignments are detailed below, with notes for special requirements when manually granting access. Note: some of this work can probably be lifted from https://github.com/Azure/azure-sdk-tools/blob/main/packages/python-packages/apiview-copilot/scripts/apiview_permissions.py

**OpenAI:**

- Azure AI Inference Deployment Operator
- Must be applied at the resource group level
- Cognitive Services OpenAI User

**Azure AI Project:**

- Azure AI Inference Deployment Operator
- Must be applied at the resource group level

**Search:**

- Search Index Data Reader

**Cosmos:**

- Cosmos DB Account Reader Role
- Cosmos DB Operator
- Cosmos DB Built-in Data Contributor
- Must be applied with the [Azure CLI](https://aka.ms/cosmos-native-rbac)
- Find the role details with `az cosmosdb sql role definition list --resource-group "{x}" --account-name "{x}"`
- Assign the role to user service principal with `az cosmosdb sql role assignment create --resource-group "{x}" --account-name "{x}" --role-definition-id "{x}" --principal-id "{x}" --scope "{x}"`