Grant simplification

The capabilities_http and capabilities_http_grants tables are no longer coupled via the capability_name column. This simplifies grant configuration.

add column for generic identity attribute requirements in capability tables

Also releasing this as v1.0.