Institutional objects

• add support for projects and institutions, updated tests and docs
• refactor: own audit file, better install script
• grant audit moved to audit_log_objects
• removed UID and GID range restrictions, only > 1000 enforced
• allow group self moderation
• ensure correct person group expiry
• audit tables use current_timestamp for event time, instead of now() - to be independent of transaction start