feat(permissions)!: v0.5.0 — domain-oriented named actions, AND/OR op…

[edimedia]

…erators, translatable labels

BREAKING CHANGE: actions are now named strings (create, approve, …) instead of single letters (r, w, d). Permission string format uses '/' (AND) and '|' (OR) separators. Scope ownership is strict.

Core
────

• actions per scope in PERMISSION_PRESET["actions"] with implies hierarchy and translatable labels via gettext_lazy
• format: scope:action1/action2 (AND) | scope:action1|action2 (OR)
• ScopePermission respects / |; ScopeAnyActionPermission always OR
• ACCESS_SCOPES supports strings or {key, label} dicts with _()
• strict scope ownership: duplicate → ImproperlyConfigured
• module self-configures via permissions/permissions.py
• ACCESS_MANAGER_SCOPE defaults to 'access'

API
───

• GET /api/access/scopes → [{key, label}] (NEW)
• GET /api/access/scopes/{scope}/actions → [{key, label}] (NEW)

i18n
────

• django.po/.mo: French labels for built-in actions & scope

DB
──

• migration 0010: ArrayField max_length 5→50

Tests & docs
────────────

• all tests migrated to named actions + labels + scope conflicts
• docs/permissions.md rewritten, README updated