IAM: Move resource definitions to apps/iam step 1 (#107389)

* wip

* Use serviceaccount model from /apps/iam

* revert version update

* Add tembinding, userteam, other improvements

* Change serviceaccounttoken spec

* Revert the change of ServiceAccountToken

* Revert the change of UserTeam

* Clean up

* Remove files that are not needed for now

* Lint

* Update sql query's integration tests

* Fix tests

* update openapi spec

* Move LastSeenAt to the annotations

* Updte openapi_snapshots

* Change lastSeenAt annotation name

pkg/registry/apis/iam/legacy/users_query.sql

@@ -1,5 +1,6 @@
 SELECT o.org_id, u.id, u.uid, u.login, u.email, u.name,
-  u.created, u.updated, u.is_service_account, u.is_disabled, u.is_admin
+  u.created, u.updated, u.is_service_account, u.is_disabled, u.is_admin,
+  u.email_verified, u.is_provisioned, u.last_seen_at
   FROM {{ .Ident .UserTable }} as u JOIN {{ .Ident .OrgUserTable }} as o ON u.id = o.user_id
  WHERE o.org_id = {{ .Arg .Query.OrgID }}
    AND NOT u.is_service_account