CreateArtifact is restricted to instance admins and Ponos agents

After !1937 (merged), CreateArtifact is restricted to instance admins and Ponos agents, instead of internal users, instance admins and Ponos agents. This prevents arkindex_tasks.build_worker_version from creating an artifact for each built Docker image.