Update notes for submitted changes

* access policies: bkr client commands
Update notes for submitted changes

* separate Flask app out into its own module