Replace Manages/Invites relations with Grant Rules

Currently only the creator can perform actions on Identities, Humans, Resource Servers, Clients, Roles, Invites etc. This relation needs to be replaced with scopes, so it is possible to delegate control of resources to others.

An idea could be to ask aap judge for access to resources and list what is possible.