Remove rule reset from roles cli command
Add generic "provision" command for each binary and (re)set perm. rules
Permission rules are now separated and part of AccessControl service
Facility for watchers was added.
- migrate from log to go.uber.org/zap package
- add requestID header with sticky log field
- push logging via context to REST controllers & HTTP middleware
- enhance request/resnpose logging
- add service logging framework
- add ZapProfiler for db query profiling
- upd(all): indent spec.json files on all apps
- upd(auth): rename auth app to cmd
- upd(sam): move orgs, teams to system
- upd(system): extend spec.json for check
- upd(codegen): include system/
- upd(codegen): always generate spec files
- upd(sam): references from auth to system
