split vault manager role and the payment operators role

[kdenhartog]

Currently we're referencing the Transaction Authorization key list for all endpoints. These should be split into separate lists that are logically distinct so we can make sure the secrets managers are the ones who are approving the creation of new solana keys in a vault not the transaction authorizers role and are not the same.