More granularity in roles and permissions

[jbtrystram]

This is the initial implementation for https://github.com/drogue-iot/rfcs/pull/19

This add a few new permissions and associated roles. It also add scopes to personal access tokens.

What is still TODO :

• [x] Verify the tokens scopes on the tokens operation (allowing or not a token to create other tokens). Currently there is no AuthZ on this endpoint.
• [x] Console frontend form to create tokens with scopes
• [ ] More manual testing
• [ ] System tests
• [ ] Some others things I probably forgot

It relies on a few other PRs : https://github.com/drogue-iot/drogue-bazaar/pull/5 https://github.com/drogue-iot/drogue-client/pull/20 https://github.com/ctron/patternfly-yew/pull/23