Extensions: implement `permissions` in manifest

[andreaphylum]

We need to grant extensions the possibility of requesting permissions. For example, hash-check may require read-only access to the files in a project. These permissions should be requested in the manifest, and a user must grant explicit consent at install time. Deno has CLI flags for granting permissions; we should translate the version serialized in the package manifest in the equivalent Deno runtime setup option.