Add ability to restrict resource templates to specific roles

[tanya-borisova]

Description

As a TRE Administrator,
I want to restrict specific resource templates to certain roles,
So that only certain groups of users can deploy certain resources.

For example, only Researcher should be able to deploy research-specific VMs, and only Airlock Manager should be able to deploy a Review VM.

Acceptance criteria

• Only users with roles listed on the template can perform actions on the template