Allow to restrict access for nested resources

In jugglingdb-http adapter restPath may contain some params to substitute before sending request, such as

```
set('restPath', '/users/{userId}/posts');
```

where {userId} will be substituted from post.userId.
- [ ] change jugglingdb adapter
- [ ] change generator for nested resources

The issue mentions the jugglingdb-http adapter and a restPath with parameter substitution. Look at the jugglingdb adapter code to understand how restPath is currently handled. Then examine the generator for nested resources to see how it creates routes. The goal is to modify these components to allow restricting access for nested resources based on parameters like userId.

索引モデルが issue の本文から書いたものです。