Cleanup default action group mapping

Most permissions of "manage" action group do not need to be managed or should be in a different action group:

- ATContentTypes Topic criterion permissions: should not be managed
- `Access future portal content` should be in `view inactive objects` (moved)
- `CMFEditions: Manage versioning policies` should not be managed
- `PloneFormGen` administrative permissions should not be managed
- `Content rules: Manage rules` is used on site root and should not be managed by workflows
- `List undoable changes` is a ZMI permission and should not be managed
- `Undo changes` is a used on site root and should not be managed

What's left for `manage` action group is:
- `Modify constrain types` -- this should be moved, but where?
- `Modify view template` -- this should be moved to the same place as `Modify constrain types`, I think..

@phabegger what do you think?
/cc @maethu