Add actuator code to satisfy permissions specified in 'Permissions' API field. The implementation should create a new custom role with specified permissions and assign it to the generated service account along with the predefined roles. The ID of the generated role should be updated in the status of credentials request CR.