"project" context support for aclpolicy

problem:

aclpolicy files do not support restriction via project

solution:

update aclpolicy support (xml,yaml) to support project context restriction.

given:

<context project="bob">
   <command job="*" group="*" action="..."/>
</context>

or

context:
  project: 'bob'

Then matching user is only given access to matching actions within project "bob".

Allow regex matching for project name, and "*" matches all projects.