Mdm::Authority + specs

[#50752269]

Mdm::Authority models the idea of an authority, such as CVE, for
references.  Specs for associations don't pass yet because the
associated classes aren't written yet.