Least privilege

Giving each user and role only the permissions its job needs, so a bug in `kc-orders-api` can reach only the one table and topic it uses.