Add scopes

References: #395 (closed), permission design blueprint.

This ticket tracks implementing scopes, that are used to host multiple sets of workspaces each with its own set of admins, groups and so on.

Likely next actions:

• Add a new Scope model, with only a name field
• Create a debusine scope to use as default in data migrations
• Make Workspace unique by Scope