Fix row level security policies for waterway admin Since 'staging_done OR' was added to the conditions to improve performance for read access, it was also allowed to delete and partly update entries with staging_done set to true but otherwise being outside the country of the respective waterway admin. Using an extra policy for each command and using the 'staging_done OR' tweak only FOR SELECT should fix authorization while keeping performance.

The gemma database schema requires PostgreSQL >= 11.

`dot.tmpl` is a template file for `postgresql_autodoc`
to be more similiar to UML and leave out some less useful labels.

See  `../docker/README.md`

Look at `updates/README.md` to how databases are updated.