Internal review

[brickpop]

Changes implemented:

• Replacing the pluginUpdater usage:
  • Make strict use of execute to perform grant, applyUpdate and revoke with the intended values
  • Drop UPDATE_PLUGIN_PERMISSION requests
• Adding OnlyPluginUpdaterCondition to restrict the above
• Updating GovernancePluginsSetup and SpacePluginSetup constructors to receive the PSP address
  • Used when deploying the pluginUpdater condition
• Adapting the MemberAccessExecuteCondition to only allow execute calls rather than expecting direct actions
• Update the relevant tests and add new ones

[CLAassistant]

Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you all sign our Contributor License Agreement before we can accept your contribution.
1 out of 2 committers have signed the CLA.

✅ brickpop
❌ Jør∂¡

---

Jør∂¡ seems not to be a GitHub user. You need a GitHub account to be able to sign the CLA. If you have already a GitHub account, please add the email address used for this commit to your account.
_{You have signed the CLA already but the status is still pending? Let us recheck it.}