add user update/delete policy

opa/user/delete.rego

@@ -0,0 +1,11 @@
+package user.delete
+
+default allow := false
+
+allow := true {
+    input.uuid == input.owner
+}
+
+allow := true {
+    input.role == "admin"
+}

opa/user/update.rego

@@ -0,0 +1,11 @@
+package user.update
+
+default allow := false
+
+allow := true {
+    input.uuid == input.owner
+}
+
+allow := true {
+    input.role == "admin"
+}