[FEATURE] Add permission binding to who can do what in the backend

[fezproof]

Use the permissions hook to apply ho can do what in the backend This will decide if admins, managers or coaches can control endpoints

const permission = require('../../hooks/permission');

// =======

create: [
  permission({
    roles: ['admin', 'coach'],
  }),
]