Access Control Plugin for Registry APIs

[Yuqing-cat]

This PR covers

• A access control plugin for all registry APIs (regardless of registry type)
• Access Control Management APIs and management UI
• A readme document

[Yuqing-cat]

Some updates:

• Offer 2 options for @router.get("/features/{feature}":
  • if user pass project name, will validate access directly
  • if user do NOT pass project name, will validate access with the project name in feature response json
• Clearer configuration
  • Add ".env" sample file
  • update os.envrion[""] to os.environ.get()
• Add Exception for requests without token
• The behavior of UI performs the same with test registry endpoint https://feathr-sql-registry.azurewebsites.net and localhost in all pages.

Will include in the following PR:

• Add a redirect page for 403 Exceptions to tell user what access is required.

[Yuqing-cat]

Updates:

• All SQL query is updated to prevent injection
• All configs will follow the os.env >.env > default config sequence to get value.
• All operation will read / write direct to SQL table rather than Cache.