Refactoring to remove the class-reference from the ACL-related
view helper. Add an explicit content type when checking for perms,
which is looked up from the class, when available, or a vertex frame
if not. TODO: Further refactoring and cleanup.

Genericised the API endpoint for setting content type permissions with
a particular scope.