Conditionally add agentless index permissions

[orestisfl]

Summary

Adds necessary permissions to write to the agentless-* index. See:

• Elasticsearch PR: Permissions required for stateful agentless integrations elasticsearch#118644
• Context: https://github.com/elastic/security-team/issues/11104

Checklist

Check the PR satisfies following conditions.

Reviewers should verify this PR satisfies this list as well.

• Any text added follows EUI's writing guidelines, uses sentence case text and includes i18n support
• Documentation was added for features that require explanation or tutorials
• Unit or functional tests were updated or added to match the most common scenarios
• If a plugin configuration key changed, check if it needs to be allowlisted in the cloud and added to the docker list
• This was checked for breaking HTTP API changes, and any breaking changes have been approved by the breaking-change committee. The release_note:breaking label should be applied in these situations.
• Flaky Test Runner was used on any tests changed
• The PR description includes the appropriate Release Notes section, and the correct release_note:* label is applied per the guidelines

Identify risks

Does this PR introduce any risks? For example, consider risks like hard to test bugs, performance regression, potential of data loss.

Describe the risk, its severity, and mitigation for each identified risk. Invite stakeholders and evaluate how to proceed before merging.

• See some risk examples
• ...

[elasticmachine]

Pinging @elastic/fleet (Team:Fleet)

[elasticmachine]

💛 Build succeeded, but was flaky

• Buildkite Build
• Commit: 82cb077
• Kibana Serverless Image: docker.elastic.co/kibana-ci/kibana-serverless:pr-203810-82cb07732b6a

Failed CI Steps

• Fleet Cypress Tests #1

Metrics [docs]

✅ unchanged

History

• 💛 Build #260715 was flaky b03c206
• 💚 Build #260023 succeeded ce43257
• 💚 Build #259422 succeeded 3a837ac
• 💚 Build #259361 succeeded fa79140

cc @orestisfl

[elasticmachine]

Pinging @elastic/kibana-cloud-security-posture (Team:Cloud Security)

[seanrathier]

I don't fully understand why we need to do this. I tried getting the gist from reading the parent issues but still don't understand.