remove the robot update permission

[wy65701436]

from the perspective of preventing privilege escalation, remove the robot update permission from the possilbe permission set

Thank you for contributing to Harbor!

Comprehensive Summary of your change

Issue being fixed

Fixes #(issue)

Please indicate you've done the following:

• Well Written Title and Summary of the PR
• Label the PR as needed. "release-note/ignore-for-release, release-note/new-feature, release-note/update, release-note/enhancement, release-note/community, release-note/breaking-change, release-note/docs, release-note/infra, release-note/deprecation"
• Accepted the DCO. Commits without the DCO will delay acceptance.
• Made sure tests are passing and test coverage is added if needed.
• Considered the docs impact and opened a new docs issue or PR with docs changes if needed in website repository.

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 66.10%. Comparing base (c8c11b4) to head (280ebcd).
Report is 294 commits behind head on main.

Additional details and impacted files

@@             Coverage Diff             @@
##             main   #21028       +/-   ##
===========================================
+ Coverage   45.36%   66.10%   +20.73%     
===========================================
  Files         244     1049      +805     
  Lines       13333   114602   +101269     
  Branches     2719     2856      +137     
===========================================
+ Hits         6049    75759    +69710     
- Misses       6983    34702    +27719     
- Partials      301     4141     +3840     

Flag	Coverage Δ
unittests	66.10% <ø> (+20.73%)	⬆️

Flags with carried forward coverage won't be shown. Click here to find out more.

Files with missing lines	Coverage Δ
src/common/rbac/const.go	10.63% <ø> (ø)
src/server/v2.0/handler/robot.go	12.71% <ø> (ø)

... and 1287 files with indirect coverage changes

[chlins]

lgtm