Migrated roles and permissions code
We moved remaining
permissions-related code out of the Open Commerce API and into the
Previously, developers had to use the built-in authentication service or fork the whole app to use a custom one. This change makes it easier to swap this plugin for a custom authorization service or implement other options like Auth0.