Define plugin rights

If we add lot of fonctionalities like web, merge and exec cmd, user should be able to know and manage rights of each plugin.

By default give rights they need, and user see them before activate the plugin or not.

Rights:

• Add/mod/del file in worktree/webcontent/cache
• Merge branchs (graft)
• Exec cmds (ci docker)
• call http (webhook, mastodon…)
• receive http

Include branches and path in rights?