Role requests UI

[eguerrant]

Adding in Role Requests to the Access UI

In this PR, I:

• Updated the Role Requests API so that blocked roles aren't shown to blocked owners and are forwarded to Access admins as needed
• Created a UI for Role Request creation, list, and viewing/response
• Fixed various bugs I found along the way (including on non-role requests pages)

General Workflow

If you own at least one role, a 'Create a request button' will be shown. You will have the option to choose for which of the roles you own you'd like to make a request, to which non-role group you'd like the role to be added to, membership/ownership, an amount of time for access, and the ability to provide a reason.

Owners or admins should be notified on role request creation.

Owners who are not blocked by group tag constraints can respond to the request. If the owner is blocked, a note will be shown.

If all group owners are blocked, Access admins will need to respond to the request. The request is added to admins' 'Assigned to me' list and a note is shown that all owners are blocked on the request page.

After a decision is made on the request, the requester is notified of the decision.

Regular role request read page:

Viewing role members who will be added if the request is approved:

Blocked owner role request read page:

Admin view all owners blocked request read page: