Goal: 

• Move the rbac code out of observabilityclient, use it to implement proper query modification in Aetos

Acceptance Criteria:

• Requests coming from Aetos to Prometheus have properly modified queries for tenancy enforcement.