- change policy names to be based on the path they are stored at
- add policy and role to manage incus cluster join tokens