[IMP] base: tighten `ir.actions.*` access rights

All users have read access on `ir.actions.server`.  Add `group_system` on some
fields to make server actions a bit more discrete about what they do.