Set up vault policy on concours/* after initialized

Currently after job `initialize-vault` is done, Vault is still not usable until following policy is added.

concourse.hcl
```
path "concourse/*"
{
  capabilities = ["read"]
}
```

`vault create policy concourse concourse.hcl`

Otherwise on production CI there will be 401 permission denied error.
