GMS-2023-143: Authenticated user can gain unauthorized shell pod and kubectl access in the local cluster

An issue was discovered in Rancher where an authorization logic flaw allows an authenticated user on any downstream cluster to (1) open a shell pod in the Rancher local cluster and (2) have limited kubectl access to it.