Add permission scope module for org-level permission binding *  Add permission_scope.py module with Scope enum and helper functions

• Add Django settings ROOT_SCOPE_APPS and TENANT_SCOPE_APPS for configurable app scope mapping
• Add deployment configuration to support scope app environment variables
• Add comprehensive tests for permission scope functionality
• Support for determining highest scope among multiple permissions
• Support for V1/V2 permission format conversion

This provides the foundation for binding roles to appropriate scopes: - DEFAULT: Default workspace level (lowest) - ROOT: Root workspace level - TENANT: Tenant level (highest)