feat privileges

- [x] register func for modules to create privileges
- [x] `/privileges` api endpoint listing all privileges for manage roles ui
- [x] check user/role privileges in `auth`
- [x] provide user assigned privileges to ui