allow access to API by category

[donrestarone]

presently, the can_manage_api privilege grants access to all API namespaces. We want to add a feature such that,

1. We retain the full access can_manage_api that allows access to all API namespaces and
2. allow for limited access to API namespaces by category.

to accomplish this we will introduce 2 checkboxes at the top level (only one of them selectable):

1. Allow access to all API Namespaces - read access only / read + write access / read API resources only? / allow exports? / can access API settings? / can access External API Connections ? / can access API Actions?
2. Allow access to API Namespaces by category - read access only / read + write access / read API resources only? / allow exports? / can access API settings? / can access External API Connections ? / can access API Actions?

When "Allow access to API Namespaces by category" is selected it should show the categories for selection

[donrestarone]

@alis-khadka @Pralish who wants to pick up this task? Note that the frontend work can be delegated to @westernal at your discretion