resource/aws_iam_role: Add exclusive lists of policies to role

This provides a way to maintain an exhaustive list of policies
associated with a given role. When applied, any changes made
outside of Terraform, are reverted back to the configuration
provided to Terraform.

See hashicorp#4426