Improve handling of missing permissions

In this release:

• More robust handling of missing permissions (AWS has a variety of ways of expressing insufficient credentials)
• Fix tabulate usage for running queries directly
• Embed AWS adaptive retry behavior in docker env variables
• Add an optional external_id to the provider_account table to facilitate joining against other data sources