feat(12.1-02): permissioneditor field in radio or checkbox mode

- type: permissioneditor with mode radio (1, -1) or checkbox (1); the
  controller serves the options per request through
  cabana.PermissionEditorProvider and reads and stores the values
- a save answers 422 for a non-object, an unknown code or a value outside the
  mode's set and 403 for a changed locked code; stored codes that are not
  offered are kept
- record responses carry the stored permissions as an object
- SPA: PermissionEditorField with sections by tab, locked rows and a read-only
  mode for the preview
- README, docs, OpenAPI document, TS types and dist updated

modules/cabana/contracts.go

@@ -105,6 +105,9 @@ type CompiledController struct {
 	// virtual is the set of form field names the controller lists through
 	// pact.FormVirtualFields: never bound, filled or projected.
 	virtual map[string]bool
+	// permissions are the form's `type: permissioneditor` fields: field name
+	// to mode (radio or checkbox).
+	permissions map[string]string
 }
 
 // Registry is the immutable controller map keyed by controller ID.