workflows: Holding Pen authorization

* Adds decorators for permission check to Holding Pen blueprints.

* Adds new ACL with basic "viewholdingpen" authorization to access
  the Holding Pen.

Reviewed-by: Jiri Kuncar <jiri.kuncar@cern.ch>
Signed-off-by: Jan Aage Lavik <jan.age.lavik@cern.ch>
access: Holding Pen role

* Adds Holding Pen role and authorization linked to the
  viewholdingpen action in workflows module.

Reviewed-by: Jiri Kuncar <jiri.kuncar@cern.ch>
Signed-off-by: Jan Aage Lavik <jan.age.lavik@cern.ch>
access: fix holdingpenusers role definition

Signed-off-by: Jiri Kuncar <jiri.kuncar@cern.ch>
previewer: fix base template for bundles support

Signed-off-by: Jiri Kuncar <jiri.kuncar@cern.ch>
previewer: initial release of ZIP file plugin

* Adds basic access controll check for record only.

* NOTE Add following line to your configuration to enable this plugin
  `CFG_PREVIEW_PREFERENCE = {'.zip': ['zip']}`  (PR #2321)

Co-authored-by: Jiri Kuncar <jiri.kuncar@cern.ch>
Signed-off-by: Antonios Manaras <antonios.manaras@cern.ch>