Explore: Provide way to determine what permissions are needed for installing a package

**Describe the problem/challenge you have**
Currently, kapp-controller requires a service account to install an AppCR. When installing packages, it may not be clear to the user what permissions are required to create the resources within the package, which may result in them providing too many permissions.

**Describe the solution you'd like**
Some way for a user to know which permissions are required to install a package.