Enhance permissions-cli.md with ownership templates info

[bwalsh]

Improve CLI documentation for ownership templates and project creation

Summary

This PR expands the permissions documentation to better explain how ownership templates work and how users create new organizations and projects.

The goal is to make the feature understandable for users who are new to Gen3 and Arborist, rather than assuming familiarity with the underlying authorization model.

Changes

• Added user-centered documentation describing:

  • what an ownership template is
  • why templates exist
  • how templates fit into the Gen3 resource hierarchy

• Documented the currently supported templates:

  • gen3-program
  • gen3-project

• Explained when each template should be used.

• Added examples for creating:

  • organizations
  • projects

• Included diagrams illustrating the resulting resource hierarchy.

• Documented the typical lifecycle:

  1. Configure a profile
  2. Create or join an organization
  3. Create a project
  4. Grant collaborator access
  5. Upload data

• Clarified that ownership templates are defined by the Gen3/Arborist server, not by the CLI.

• Documented the current limitation that the CLI cannot enumerate available templates.

Motivation

Previous documentation demonstrated the create-descendant command but assumed readers already understood:

• what a template represents
• why different templates exist
• when to choose one template over another
• where templates are defined

This documentation fills those gaps and provides a more approachable onboarding experience for new users.

Follow-up

A useful future enhancement would be a discovery command such as:

calypr-cli permissions ownership templates

to list the ownership templates supported by the connected server, eliminating the need for users to know template names in advance.

[github-actions]

Test Coverage Report

Overall Coverage: 60.2%

Package Coverage

Package	Coverage
arborist	77.1%
conf	54.7%
fence	54.0%
g3client	28.8%
gecko	74.4%
githubutil	53.2%
logs	53.0%
request	79.4%
requestor	84.7%
sower	83.3%