- new table tracks access levels between each DID and a repo
- creators of a repo are owners by default
- newly added members are writers by default
- introduces AccessLevel middleware to mask routes based on level

we can start clicking links and stuff now

So handles are now purely cosmetic and are resolved to DIDs in the middleware.
auth.ResolveIdent seems to add a lot of latency, so we cache the resolved ident
for 24 hours. It's still not as perfomant but we can come back to this later.