initial work for acp solution

[ecrupper]

This is very much a draft but I was hoping it could provide some more detail on how the ACP idea might work server-side. For example purposes, I made the access levels write to run the build, admin to approve of a build with a comment. I also made the trigger comment the ✅ emoji just for now.

Hopefully these changes can potentially act as a supplement to the proposal for added pipeline security. I'm sure there are some details I'm missing in this implementation, but hopefully it makes a clearer picture of what it would look like.

[codecov[bot]]

Codecov Report

Merging #567 (2b3c0dc) into master (bd16fc2) will decrease coverage by 0.17%. The diff coverage is 0.00%.

@@            Coverage Diff             @@
##           master     #567      +/-   ##
==========================================
- Coverage   54.85%   54.68%   -0.18%     
==========================================
  Files         179      179              
  Lines       14899    14946      +47     
==========================================
  Hits         8173     8173              
- Misses       6409     6456      +47     
  Partials      317      317              

Impacted Files	Coverage Δ
api/webhook.go	0.00% <0.00%> (ø)

[ecrupper]

Closing