UI: expose network ACL replacement from VPC tiers

[Dogface2k]

Summary

Expose the existing replaceNetworkACLList operation from the VPC tiers view.

Operators can select a tier's replacement ACL, submit the existing typed API action, and receive the normal asynchronous-job result and inventory refresh. The modal is destroyed on close so it does not share a mounted form instance with the create-tier modal.

Scope

• VPC tier UI only
• Existing replaceNetworkACLList API; no server/API changes
• ACL choices are loaded for the current VPC
• Permission-unavailable action is disabled
• Existing ACL warning messages are reused

Verification

• git diff --check
• Browser interaction and production UI build remain to be exercised before merge: open VPC tiers, replace an ACL, verify async completion and refresh, verify permission-negative behavior, and reopen the create-tier form.