NameNode: persist ACLs in fsimage.

Store ACLs in fsimage so that ACLs are retained across NameNode restarts. This requires encoding and saving the AclManager state as a new section of the fsimage, located after all existing sections (snapshot manager state, inodes, secret manager state, and cache manager state).