Adding @Security annotation

[moufmouf]

The @Security annotation is meant to handle complex right cases not covered by @Logged or @right.

    /**
     * @Query()
     * @Security("secret=='foo'", message="Wrong secret passed")
     */
    public function getSecretPhrase(string $secret): string
    {
        return 'you can see this secret only if passed parameter is "foo"';
    }

TODO list:

• Make arguments of the method accessible
• Make current user accessible
• Add functions to check rights (is_allowed?)
• Think about a mechanism similar to Symfony voters
• Proper documentation
• Test / improve exception messages (if Security annotation fails to compile / execute)