feat(12.1-02): permissioneditor field in radio or checkbox mode

- type: permissioneditor with mode radio (1, -1) or checkbox (1); the
  controller serves the options per request through
  cabana.PermissionEditorProvider and reads and stores the values
- a save answers 422 for a non-object, an unknown code or a value outside the
  mode's set and 403 for a changed locked code; stored codes that are not
  offered are kept
- record responses carry the stored permissions as an object
- SPA: PermissionEditorField with sections by tab, locked rows and a read-only
  mode for the preview
- README, docs, OpenAPI document, TS types and dist updated

modules/cabana/testdata/roster/models/person/fields.yaml

@@ -26,6 +26,12 @@ fields:
         type: checkbox
         default: true
         context: create
+    permissions:
+        label: acme.roster::lang.people.permissions
+        type: permissioneditor
+        mode: radio
+        tab: acme.roster::lang.people.tab_permissions
+        context: update
     joined_ip:
         label: acme.roster::lang.people.joined_ip
         type: text