feat: add disallow access console option for custom role

[ruibaby]

What type of PR is this?

/area console
/kind feature
/milestone 2.11.x

What this PR does / why we need it:

支持为自定义角色配置 禁止访问 Console 的选项。

Special notes for your reviewer:

测试方式：

1. 创建一个新角色，勾选禁止访问 Console 的选项，并赋予给某个用户。
2. 登录之后，尝试访问 /console 观察是否能够正常访问。
3. 检查个人中心左下角是否有进入 Console 的按钮。
4. 测试其他未设置这个选项的角色是否正常。

Does this PR introduce a user-facing change?

支持为自定义角色配置 **禁止访问 Console** 的选项。

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Comparison is base (61fe95a) 56.08% compared to head (894cb2d) 56.07%.

Additional details and impacted files

@@             Coverage Diff              @@
##               main    #4958      +/-   ##
============================================
- Coverage     56.08%   56.07%   -0.02%     
+ Complexity     3032     3031       -1     
============================================
  Files           524      524              
  Lines         17663    17663              
  Branches       1319     1319              
============================================
- Hits           9906     9904       -2     
- Misses         7209     7210       +1     
- Partials        548      549       +1     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

[JohnNiang]

关于 Post Editor、Post Author 和 Post Contributor 角色是否需要设置能否进入 console，这些数据会在每次 Halo 启动的时候初始化，即使设置了也会被覆盖掉。

[ruibaby]

关于 Post Editor、Post Author 和 Post Contributor 角色是否需要设置能否进入 console，这些数据会在每次 Halo 启动的时候初始化，即使设置了也会被覆盖掉。

可以，需不需要加一个 rbac.authorization.halo.run/system-reserved？

[JohnNiang]

/approve

[f2c-ci-robot]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: JohnNiang

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

• OWNERS [JohnNiang]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[JohnNiang]

关于 Post Editor、Post Author 和 Post Contributor 角色是否需要设置能否进入 console，这些数据会在每次 Halo 启动的时候初始化，即使设置了也会被覆盖掉。

可以，需不需要加一个 rbac.authorization.halo.run/system-reserved？

建议加上，如果用户想要自定义角色，我将提交另外 PR 再定义和个人中心相关的角色模板。

[ruibaby]

关于 Post Editor、Post Author 和 Post Contributor 角色是否需要设置能否进入 console，这些数据会在每次 Halo 启动的时候初始化，即使设置了也会被覆盖掉。

可以，需不需要加一个 rbac.authorization.halo.run/system-reserved？

建议加上，如果用户想要自定义角色，我将提交另外 PR 再定义和个人中心相关的角色模板。

我直接在这个 PR 上加了。

[JohnNiang]

/lgtm