feat: permission cleanup script

[mini-bomba]

we need to figure out a way to delete permissions for deleted objects
make it into a script, and also make base controller automatically delete permissions for objects being deleted