Allow vault cooking from the UI

The vault is now about as stable as it can be in the short term, so I think it is time to finally make this available to everyone, without having to go throught the API manually.

Closes T3504. Depends on swh/infra/sysadm-environment#3918 (closed).

---

Migrated from D7120 (view on Phabricator)