Docs: Note permissions distinction between global policy automations and software install (#19551) and script execution (#17129) policy automations#23447