access-control

Specivo 0.8.0: Groups, public access, and clearer access control

User groups hold project roles. Public projects can let visitors read without signing in. Security fixes for roles and relations.