[littlegrasscao]

Summary

• add the USE_RECIPIENT privilege, checked through CatalogConnector#authorize
• GET /recipients lists every recipient for a caller with USE_RECIPIENT, and only the caller's own recipients otherwise
• GET /recipients/{recipient} needs the caller to own the recipient or hold USE_RECIPIENT; otherwise it returns 403 PERMISSION_DENIED. Callers can no longer see the activation URL of someone else's recipient without the privilege
• alice and bob in the sample local-catalog.yml also hold USE_RECIPIENT; carol still does not
• replaces the USE_RECIPIENT TODOs from server: add provider-admin recipient entities and CRUD #98

Testing

• mvn clean install: 125 tests passed
• RecipientReadPrivilegeTest:
  • carol, without USE_RECIPIENT, lists only her own recipient, while bob, who holds USE_RECIPIENT, lists both alice's and carol's
  • carol can get her own recipient but gets 403 for alice's; bob can read carol's