feat permissions

- [x] register func for modules to create privileges
- [x] `/privileges` api endpoint listing all privileges for manage roles ui
- [ ] check user/role privileges in `auth`
- [ ] provide user assigned privileges to ui
- [ ] content access control on service level