refactor: Policies Architecture (#1016)

* add policy serialize method

* Add policies to collection responses

* wip

* test: remove .only

* refactor: Return policies with team and document requests

* store policies on the client

* refactor: drive admin UI from policies

server/policies/document.js

@@ -28,6 +28,7 @@ allow(User, 'archive', Document, (user, document) => {
     if (cannot(user, 'read', document.collection)) return false;
   }
   if (!document.publishedAt) return false;
+  if (document.archivedAt) return false;
 
   return user.teamId === document.teamId;
 });