add "repository" permissions role and make sure we have a sane "accept" default for the custom role.
Merge https://github.com/friendica/red into pending_merge