feat(rbac): add permissions for app review management

    Introduces a new set of permissions for the `AppReview` resource. This follows the established `resource.action_owned` pattern for user-generated content, defining `create`, `read`, and `update` permissions. These will be used to control user access to their own app review records.

Author: fulleni

lib/src/rbac/permissions.dart

@@ -123,4 +123,14 @@ abstract class Permissions {
 
   /// Allows reading the user's own reports.
   static const String reportReadOwned = 'report.read_owned';
+
+  // App Review Permissions (User-owned)
+  /// Allows creating an app review record.
+  static const String appReviewCreateOwned = 'app_review.create_owned';
+
+  /// Allows reading the user's own app review record.
+  static const String appReviewReadOwned = 'app_review.read_owned';
+
+  /// Allows updating the user's own app review record.
+  static const String appReviewUpdateOwned = 'app_review.update_owned';
 }