[WIP] Feature/api queries stars

The permission check should be on:
* manage_public_queries
* save_queries
As discussed, users having the save_queries permission are allowed to star/unstar queries they saved. Users having the manage_public_queries permission are allowed to star/unstar public queries.