Added RBAC permissions checks for private programs (and is_allowed Mustache helper)

Added RBAC permissions checks for all create/update/delete actions on program pages.Added the is_allowed Mustache helper that is used to check multiple access types given a resource_type and context_id. Ready for usage on non-program pages if necessary in the future.