Introduce `VERSIONED_STORAGE_MANAGER` role

**Background**
At the moment we use one role `PIPELINE_MANAGER` to control access to pipeline and versioned storages object. It would be helpful to introduce a separate role `VERSIONED_STORAGE_MANAGER` and use to grant access to versioned storages.

**Approach**
Access to versioned storage operations (create, delete) shall be allowed for uses with `VERSIONED_STORAGE_MANAGER` role assigned. Access to pipeline methods shall remain as is.