add rbac support

[shini4i]

As project usage increased, we started to get internal requests to restrict the projects that should be visible to a specific user. Currently, it is not possible. We want to avoid forcing users to duplicate all the permissions, so the most reasonable approach is re-using RBAC from ArgoCD itself.

[shini4i]

Additionally, for now, let's implement it in the context of already existing keycloak integration.