Issue #3625519: Keep roles saveable when a resource definition was dropped

A resource configuration naming a plugin that is not defined now hands out a stand-in without routes that keeps the permissions of the resource, so the permission list builds, roles can be saved and keep what they were granted. The resources the definition alter leaves out are recorded, which lets the generator retire the endpoints of a deleted bundle together with their configuration and permissions. The status report names such configurations and the command that removes them.

Closes #3625519