feat: move legacy permissions into npm package

[kieckhafer]

Impact: major|minor (minor code changes, major impact as we move plugins to npm)
Type: feature

This PR is the first of many which will move our internal plugins to be externally installed npm packages.

This PR removes the legacy-authorization plugin code from the API, and installs the @reactioncommerce/plugin-simple-authorization to perform the same functions.

Breaking changes

None

Testing

The authorization code is the same as it was before, it's just being installed from a different place, so you should see nothing different in the behavior of this PR and the v3.0.0 release it was created from.

1. Start the API
2. Create a user
3. Create a shop
4. Click around and see that you have permission to do what you should be able to , as the first user
5. create a second user
6. see that you can't perform actions a "regular" user shouldn't be able to

Once this PR is merged, we should do a 3.1 release alongside this PR in api-migrations

[mikemurray]

👍

[kieckhafer]

The license issue being called out by SNYK has been looked at, and we are OK to merge with the error being thrown.