Properly prefix permissions

Permissions are a bit inconsistently named, for instance:
- payment.rules.administer
Used for the configuration of Rules events, actions, and conditions.
- payment.administer
To configure Payment (field) configuration.
- payment.update.any
To update any payment method.

We should convert these to a more consistent naming format. Proposition:
MODULE_NAMESPACE.LOCAL_NAMESPACE.OPERATION.DETAILS
Where MODULE_NAMESPACE will always be "payment", LOCAL_NAMESPACE can be the entity type, or a third party module, OPERATION is, well, the operation ("create", "administer", etc), and DETAILS can be a further specification, such as "own" or "any".
Examples:
- payment.payment.delete.own (to delete own Payment entities)
- payment.global.configure (to administer Payment module's global configuration)
- payment.rules.administer (to administer Payment module's Rules configuration)
- payment.payment_method.create.PaymentMethodBasicController (to create payment methods using the PaymentMethodBasicController controller)
- payment.payment_method.configure (to generally configure payment methods, like "administer", but does not grant access to perform operations on individual payment methods)