Add grant to a data-access role

An allowlist entry that maps a data-access role to a set of visible tables.

Uses glob-style patterns: * matches everything, sales_* matches tables prefixed with sales_. Role with no grants has no access; a grant of schema_pattern='*', table_pattern='*' means full access.