Fine grained access: Second iteration

[palagdan]

continuation of PR #208 related to issue #202.

• secure RM, i.e. REST endpoints and methods in frontend with concrete roles (e.g. rm-edit-records, rm-show-statistics)
• secure ava analytics, i.e. REST endpoints and methods of frontend with concrete roles (e.g. rm-show-statistics)
• remove ROLE_USER and ROLE_ADMIN from code base
• remove ROLE_USER and ROLE_ADMIN from configuration of keycloak at KBSS (i.e. 23distribution/[supplier|operator]) and realm-export.json
• support keycloak-auth profile
  • change realm-export.json for 23distribution/[supplier|operator].* as well as record-manager-ui/deploy/keycloak-auth
• test migration at KBSS
• migrate it in AVA
  • write clear migration guide for AVA
  • write Psenicka to migrate
• design how codelist imports can be extended