feat: user management api

[mini-bomba]

we don't appear to have one at the moment???
should support user creation/modification/deletion
also need to add role assignment methods to the permissions controller
most actions should be solvro admin only, except for users modifying themselves (if it makes sense for them to modify themselves)