Introduce database schemas as privilege-based namespaces Some privileges changed (e.g. for responsibility_areas), but additional privileges were not left off intentionally before. Search path settings have been replaced by schema-qualifying names in statements to prevent object definitions from being dependend on search path settings.

--
-- Primary GEMMA roles
--
CREATE ROLE waterway_user;
CREATE ROLE waterway_admin IN ROLE waterway_user;
CREATE ROLE sys_admin CREATEROLE BYPASSRLS IN ROLE waterway_admin;