RBAC management

[flashadvocate]

MM never had a proper RBAC management interface, so it's probably a good opportunity to flesh one out in this rewrite.

Also, rather than tack on a separate RBAC implementation, some TC-manager specific permissions should be created, in the 1xxx id range to make them easy to add and remove without interfering with TrinityCore native permissions.

https://github.com/TrinityCore/TrinityCoreCustomChanges/blob/3.3.5/src/server/game/Accounts/RBAC.cpp

 * Calculation of current Permissions: Granted permissions - Denied permissions
 * - Granted permissions: through linked permissions and directly assigned
 * - Denied permissions: through linked permissions and directly assigned

rbac definitions https://github.com/TrinityCore/TrinityCore/blob/3.3.5/src/server/game/Accounts/RBAC.h