Catalog module - Extend authorization for work with product images and assets

[tatarincev]

• [ ] Need to restrict upload and delete images and assets by checking platform:asset:create , 'platform:asset:delete' permissions
• [ ] Switch to scope bounded permissions check in product js controllers and templates which respond for working with product images and assets. Use platformWebApp.authService.checkPermission(permission, product.securityScopes) for this task