(feat) disabling comments

Backend for turning off comments
Extended the base entities to track whether or not comments are allowed
Setup a Permissions/Manager to centralize applying of permissions (much more to come, this is just setting up the flow with comments feature)
Setup a new permissions end point that validates and applies the permissions
Extended the comments endpoint to enforce comments permissions