Create a ConsoleMe policy that is readonly

[yi2020]

The current policy under spoke-accounts gives ConsoleMe both the read AND write access that it needs. However, if someone wants to deploy ConsoleMe in read-only, they'd want to use a different policy. Especially alarming is "iam:*"...

The documentation refers to this, but it may be a good idea to:

1. Explain why each permission is needed (per ConsoleMe feature).
2. Generate a version that is read-only, with an explanation of what features wouldn't be available.

[MakboolShah]

i want to contribute on this project

[patricksanders]

@MakboolShah Great! Feel free to join our Discord (link in the README) if you have questions.

[castrapel]

@patricksanders also just wrote an initial contributing guide here that might come in handy: https://hawkins.gitbook.io/consoleme/contributing