feat(12.1-02): writable foreign keys, locked relation options, invisible columns

- FieldRelationContract.WritableForeignKey makes a belongsTo field over a
  protected foreign key writable; the protected key list is unchanged
- cabana.RelationLockProvider names related ids an administrator may not add
  or remove: options and labels carry locked, and a create or update that
  changes the locked subset is 403 before any row is written
- columns.yaml invisible keeps a column searchable and out of the rows
- a controller implementing pact.FilterOptions serves a scope filter's
  choices before the model
- SPA: locked chips and options in RelationField, DataTable skips invisible
  columns
- README, docs, OpenAPI document, TS types and dist updated

modules/cabana/testdata/roster/controllers/people/config_filter.yaml

@@ -0,0 +1,6 @@
+scopes:
+    tagged:
+        label: acme.roster::lang.people.tagged
+        modelClass: Tag
+        nameFrom: name
+        scope: tagged

modules/cabana/testdata/roster/controllers/people/config_list.yaml

@@ -2,6 +2,7 @@ list: ~/plugins/acme/roster/models/person/columns.yaml
 modelClass: Person
 title: acme.roster::lang.people.title
 recordUrl: acme/roster/people/preview/:id
+filter: config_filter.yaml
 recordsPerPage: 20
 showCheckboxes: true
 toolbar:

modules/cabana/testdata/roster/lang/en/lang.yaml

@@ -30,6 +30,11 @@ people:
   notify: Send a welcome message
   permissions: Permissions
   tab_permissions: Permissions
+  team: Team
+  no_team: No team
+  tags: Tags
+  tagged: Tag
+  tag_locked: You need an additional permission to change the staff tag.
 permissions:
   tab_content: Content
   tab_reports: Reports

modules/cabana/testdata/roster/lang/pl/lang.yaml

@@ -30,6 +30,11 @@ people:
   notify: Wyślij wiadomość powitalną
   permissions: Uprawnienia
   tab_permissions: Uprawnienia
+  team: Zespół
+  no_team: Brak zespołu
+  tags: Tagi
+  tagged: Tag
+  tag_locked: Zmiana tagu staff wymaga dodatkowego uprawnienia.
 permissions:
   tab_content: Treści
   tab_reports: Raporty

modules/cabana/testdata/roster/models/person/columns.yaml

@@ -5,3 +5,6 @@ columns:
     email:
         label: acme.roster::lang.people.email
         searchable: true
+        invisible: true
+    slug:
+        label: acme.roster::lang.people.slug

modules/cabana/testdata/roster/models/person/fields.yaml

@@ -7,6 +7,15 @@ fields:
         label: acme.roster::lang.people.email
         type: text
         span: right
+    team:
+        label: acme.roster::lang.people.team
+        type: relation
+        nameFrom: name
+        emptyOption: acme.roster::lang.people.no_team
+    tags:
+        label: acme.roster::lang.people.tags
+        type: relation
+        nameFrom: name
     slug:
         label: acme.roster::lang.people.slug
         type: text