User roles

There are now three roles:

```rb
Role.everyone
Role.full_hacker_schooler
Role.admin
```

Every user has the `everyone` role, Hacker Schoolers whose batch has started additionally have the `full_hacker_schooler` role, and faculty have every role.

Subforums have `required_role_ids`, and a user can only see that subforum (and the containing threads/posts) if they have the required roles.
Oops, I thought about this but for some reason thought that would be a syntax error. I guess I assumed stabby lambda had to use curlies.