Ensure orders policy-in-code matches controller

Policy-in-code for orders API did not map properly to orders
controller. Moved `ordeR:put` rule to `orderS:put` to all in line
with what is expected.

Change-Id: I18fc3e9d2772e3f9813aad2a79e8864cf0511abf

barbican/common/policies/orders.py

@@ -18,10 +18,10 @@ rules = [
                        'rule:admin_or_creator'),
     policy.RuleDefault('orders:get',
                        'rule:all_but_audit'),
+    policy.RuleDefault('orders:put',
+                       'rule:admin_or_creator'),
     policy.RuleDefault('order:get',
                        'rule:all_users'),
-    policy.RuleDefault('order:put',
-                       'rule:admin_or_creator'),
     policy.RuleDefault('order:delete',
                        'rule:admin'),
 ]

releasenotes/notes/remap-policy-to-match-controller-1673ec7c88235227.yaml

@@ -0,0 +1,10 @@
+---
+features:
+  - |
+    Remap the `order:put` to `orders:put` to align with language in the orders
+    controller.
+upgrade:
+  - |
+    (For deployments overriding default policies) After upgrading, please review
+    Barbican policy files and ensure that you port any rules tied to `order:put`
+    are remapped to `orders:put`.