Feature/project member permissions

[mohab-elshamy]

Summary

This PR adds configurable project-level permissions for the member role.

Project owners can choose what members are allowed to do when creating a project or later from the project edit page. The same permission configuration applies to all members of the project.

Backend authorization remains authoritative, while the frontend uses the permissions to show or hide available actions.

Changes

• Added project-level member permission settings.
• Owners can configure permissions during project creation or editing.
• Added backend authorization checks for protected actions.
• Added APIs for retrieving and updating member permissions.
• Updated the frontend to show or hide actions based on permissions.
• Owners always retain full access, while followers receive no member permissions.
• Existing behavior is preserved through backward-compatible defaults.

Configurable Permissions

Members can be allowed to:

• Edit project details.
• Manage members and tags.
• Upload and manage files.
• Upload and manage notebooks.
• Manage publications.
• Manage project logs.

Authorization Rules

• Owners always have full access.
• Members receive only the permissions enabled for the project.
• Followers do not receive member permissions.
• Project deletion remains owner-only.
• Only owners can modify the member permission configuration.

[cengique]

tested, works!