authz: grant and delete permissions for associated external accounts
Created by: unknwon
This PRs grants pending permissions for a user when:
- The new user is created via authentication provider (we already do)
- The existing user associated a new external account
And when remove the permissions, we now clean up pending permissions for all associated external accounts (not just ones created by explicit permissions APIs).