Allow grouping of permissions

This is a followup to #108979: Usability: Group node create/edit/delete permissions by node type instead of alpha → - where we changed the default sort for permissions, but there were good ideas for making the groups more explicit.

This idea was also explored (and partially coded) on #248598: Label permissions which are warned about in the user interface →