[WFLY-490] Managed domain RBAC -- Part I

Next chunk of RBAC work. Various fixes and enhancements, but primarily this is focused on RBAC in a managed domain and the associated "scoped roles" concept.

Propagation of RBAC config from the master HC to slaves is still not complete, so the managed domain stuff focuses on the master (or any HC) control of servers.

Remaining significant chunks are JMX authz (for which Kabir has a separate PR) and propagation of RBAC config from master to slaves (this week's task.)

This PR also upgrades the console to a version that works correctly with stuff already merged into master.