blocks: implement theme protected regions for the modern block manager

Controlled by declaring capabilities in the theme that specify what must
be granted to the user for the blocks in the region to be manipulated.
theme_protsample: simple theme to demonstrate protection of regions