Finer access control on submissions

[cosenal]

For some submissions (e.g., the metriq-gym submission), we want an Access-control list, so that only a few certified members (only specific tokens) can append to it.