uk: update notes endpoint test
uk: add Note model to api permissions for user
uk: add NoteSerializer
uk: add /api/v1/notes endpoint
uk: only list notes from requesting user