Get the caller's Link permissions

The calling user's Link permissions for one enterprise. Each account scope is the permission as resolved by UMS (UMS already includes implied grants — e.g. a link.account.admin/transfer grant carries the implied link.account.view), so consumers only need membership checks. bitgoLinkAdmin is a distinct enterprise-wide capability, reported separately and not folded into the scopes.