PulseVault: token-based permission system

[adithya1012]

Description

PulseVault currently has no permission system. Any authenticated user can do anything. We need scoped API tokens where each token carries only the minimum privileges required for its use-case similar to GitHub's personal access tokens. This Token will be used to view the uploaded bug report videos from PulseCam.

Tasks

• Design a permissions model: at minimum upload, download, create_issue, admin
• Issue signed tokens (JWT or opaque) that encode the privilege set
• Admin can issue a Access Token to the users.
• Expose token management UI in PulseVault (create, revoke, list tokens)

[kadenhorner]

After the call w/Doug changes were added - may take longer than this sprint