Make suites configurable by a API endpoint

**Motivation**
Suites (see #3753) are currently defined by configuration.
The downside with that is that it requires a configuration change and a restart.
The idea is to delegate this part to users with the appropriate permission.

**Acceptance criteria**
1. Suites can be created/updated and persisted to database
2. Users with the permission (`suites/read`) can get a list of the existing suites via an api endpoint
3. User with the permission (`suites/write`) can create/update a suite