access: customized access configuration

* Adds new inspire module overlay for Invenio access module.

* Sets up some default DEMO cataloger roles.

Signed-off-by: Jan Aage Lavik <jan.age.lavik@cern.ch>
It is linked to the firerules thingy. This basically means that it by default denies any user to have this role. So it is opt-in by adding people specifically to the role intead. `allow any` here would by default add all users to this role. (I think)