The dashboard should generally only check for permissions not flags.

refs #247

fixes #209

refs #127

refs #127

This should make the API functions more accessible for callers as there
won’t be any loose undefined values that were sometimes needed to skip
certain values in certain API endpoints.

Instead, every positional argument is now required and all configurable
options or extensions are part of the options object.

refs #127

API object attribute names are now:

1. camelCased (#164)
2. use Id / Ids suffix for object references (#172)

closes #138

Not all API endpoints will have the same behaviour. Some may only allow
updates but can’t remove items, others will use a paginated result list
instead of a plain result array.

This re-implements the auth store with pinia.

Other notable changes:
* the OIDC client configuration and setup is now part of
  separate module that can be included by the OIDC callback routes
  and ensures that we always use the same OIDC client configuration.
* Authorization headers for the steering and tank REST APIs are now
  set with an axios interceptor instead of specifying them for each
  API store action.

refs #127