Backport of Update ACLs, add namespace.write permission into release/1.1.x

[hc-github-team-consul-core]

Backport

This PR is auto-generated from #2029 to be assessed for backporting due to the inclusion of the label backport/1.1.x.

WARNING automatic cherry-pick of commits failed. Commits will require human attention.

merge conflict error: unable to process merge commit: "4dd5298a9f057e7081fb25d130cf665c504f443d", automatic backport requires rebase workflow

The below text is copied from the body of the original PR.

---

Changes proposed in this PR:

• Resolve bug described in server-acl-init generates incomplete API Gateway Controller policy #1911 where api-gateway controller is unable to create new namespaces

How I've tested this PR:

• Installed API gateway using a local version of this repository using the reproduction steps described in server-acl-init generates incomplete API Gateway Controller policy #1911 and consul API image set to 1.5.2. (ACL permission is missing, but this change is also reliant on a bux fix with how partitions are handled in 1.5.2)

How I expect reviewers to test this PR:

• CI passes

Checklist:

• [ X ] Tests added
• [ X ] CHANGELOG entry added

  HashiCorp engineers only, community PRs should not add a changelog entry.
  Entries should use present tense (e.g. Add support for...)

---

Overview of commits

• 6344071 - 3783178 - 7ec6ec2 - 4dd5298 - d718883 - 5d0a6ad - 74291af