A better auth API (row and field level permissions)

### Code of Conduct

- [x] I agree to follow Django's Code of Conduct

### Feature Description

In the same vein as django-tasks, Django should expose an API for user authorisation that third-party packages can leverage to implement user roles and permissions at the object and field levels.

This way, the Django team doesn't necessarily have to deal with the implementation details. Even the existing Groups and Permissions models can be offloaded into a community package (and the admin should probably leverage the API to maintain compatibility)

### Problem

Groups and Permissions have existed, but they assume object-level CRUD and anything advanced is pushed to third-party libraries. The ecosystem already has multiple established and standard libraries, but using them usually feels like learning a whole new framework on top of django.

### Request or proposal

proposal

### Additional Details

_No response_

### Implementation Suggestions

_No response_