feat: exclude grafana login and support

[nitrocode]

what

• exclude grafana login and support

why

• grafana requires some clickops actions
• support is mostly clickops unless using aws support bot

All the write perms for support according to policy_sentry

✗ policy_sentry query action-table --service support --access-level write

[
    "support:AddAttachmentsToSet",
    "support:AddCommunicationToCase",
    "support:CreateCase",
    "support:InitiateCallForCase",
    "support:InitiateChatForCase",
    "support:PutCaseAttributes",
    "support:RateCaseCommunication",
    "support:RefreshTrustedAdvisorCheck",
    "support:ResolveCase"
]

[nitrocode]

cc: @baolsen @phzietsman please review when time permits. For now, I have added these perms locally to excluded_scoped_actions using the APPEND mode

[nitrocode]

Also unsure if this is a feat or a fix. Please advise.

[baolsen]

Thanks for the contribution (and the other issues logged)!

The new exclusions seem reasonable to me, I'll merge them in as a fix and release (dont worry about renaming things I can do it on merge)

Please first merge master onto this branch (or rebase); I made a small change to allow the checks to work again :)

[phzietsman]

@nitrocode thanks for the contribution!