[feat] add capabilities at runtime

[lucasfernog]

Describe the problem

The ACL system implemented by #8428 is a static implementation of access control for IPC commands. Dynamic usage like starting a localhost server that needs access to the IPC is not supported securely.

An example is the localhost plugin which starts a localhost server to serve your app assets.
To support this use case, we need to add a runtime API that lets you allow commands on a specific execution context.

Describe the solution you'd like

Add a new function in the runtime authority to enable new permissions.

Alternatives considered

No response

Additional context

No response

[lucasfernog]

This is similar to #8798 but adding the capability at runtime is better for performance and validation.