rewrite google IAM example to use self relations instead of wildcards

[ecordell]

• uses self relations insted of wildcards
• requires fewer relationships written to bind a role / user / resource together

Playground Link