Problem Description: All collection repositories and their contents are currently visible by all authenticated users.

Proposed Solution: Allow users to mark a repository as "private", which will hide the repository and it's contents from any user that doesn't have permissions to view the repository.

At a very minimum this will require a private flag on repositories in pulp ansible (similar to how pulp container works). From here we can add the correct permissions and queryset scoping to the pulp APIs via access policies.

A more robust solution will require RBAC in pulp ansible.