Add permissions to the Settings View

[EMaksy]

Description

This pr adds abilities/permissions for the settings view.
Main features:

• Added ['all:api_key_settings']; [all:suma_settings]; ['all:activity_logs_settings']; permissions which can be assigned to a user.
• Disabled the Generate Key button for API creation [all:api_key_settings];
• Disabled Edit Settings and Clear Settings Button if the user does not have [all: all] or [all:suma_settings];
• Disabled Edit Settings button for activity logs if the user does not have [all: all] or ['all:activity_logs_settings'];
• Protecting backend API calls with policies
• Added and updated stories for storybook
• Added migration for new abilities

Demo

Did you add the right label?

• DONE

How was this tested?

Added frontend tests to check if buttons are disabled.
Added policy and controller test in backend.

E2E test will follow in a follow-up pr.

Describe the tests that have been added/changed for this new behavior.

• DONE

Did you update the documentation?

Added moduledoc in new policies for explanation

• DONE

[CDimonaco]

Overall a good job,

Please refactor the policies, and in particular the settings controller, the third param of the authorize function, should contain the "context" on which the authorize function is acting, we can't have ApiKeySettings for something not related to the apikeysettings, in general in the controller you can match on actions and on whatever conn related and pass the params accordingly.

[arbulu89]

Some few comments together with what @CDimonaco said

[arbulu89]

Really good improvement @EMaksy
Nice!
Some few nitpick comments.
The unique one that I would really like you having a look is the passing of configEditPermittedFor to SUMA configuration. It looks not neccesary, you can create the constant there and avoid one prop that we don't need. The same for activity log.
Once you change this, ready to merge!

[CDimonaco]

Good job!

LGTM 🚀

@arbulu89 I proposed Eugen to have also the get action in the get_policy_resource in the settings controller, to have more consistency, but it's true we don't use them, really up to you guys, no strong opinions :D