Secret rights management

https://redmine.teklia.com/issues/10664

A new memberships generic relation should be declared on secrets, to allow Secret.objects.get().memberships.all() to point to a QuerySet on users.Right, just like !2518 (merged) did for budgets.