Add boundary class and policy

What does this MR do and why?

This adds the Authz::Boundary and Authz::BoundaryPolicy classes. Also implement PersonalAccessToken#permitted_for_boundary? method. These will be used for authorizing granular PATs.

References

Issue: #566607

Screenshots or screen recordings

Before	After

How to set up and validate locally

MR acceptance checklist

Evaluate this MR against the MR acceptance checklist. It helps you analyze changes to reduce risks in quality, performance, reliability, security, and maintainability.