Allow listing of full bucket but without permissions of getting files execp for Input/batch_ingestion

I was struggling a bit with the policies. The proposed solution is that the ingestion user can still see all the files available in the MinIO project bucket, BUT they can only add/delete/get objects stored inside the batch ingestion prefix `Input/batch_ingestion`. Let me know what you think of this solution.