(codebuild): add granular grant methods

### Describe the feature

CodeBuild currently does not have methods to grant CodeBuild specific api commands to Iam roles.

### Use Case

I am using lambdas in a custom resource to start and wait on a CodeBuild job. Granting the permissions to the lambdas with grant methods would have been a much better user experience.

### Proposed Solution

Implement grant methods similar to other constructs. For example, `ecr.Repository` has `grantPull` and `grantPullPush` methods. Same for s3 with read and write.

### Other Information

_No response_

### Acknowledgements

- [ ] I may be able to implement this feature request
- [ ] This feature might incur a breaking change

### CDK version used

2.37

### Environment details (OS name and version, etc.)

Mac Pro 1 chip

No file or test is named in the issue. Find the CodeBuild construct and inspect the existing grantPull and grantPullPush patterns in ecr.Repository and the analogous S3 methods; done means CodeBuild exposes granular grant methods that let callers grant specific API commands to IAM roles.

Written by the indexing model from the issue text.