[8651] kiezradar api rules

[goapunk]

Describe your changes
Follow up to #5932 which adds permissions, more tests, uses UserGeneratedContentModel for models with user content and resets the kiezradar migrations. This sadly means you have to scrap your local development database or try the following steps:

If you want to keep your database you could do the following steps:

# enter your sqlite3 db
sqlite3 db.sqlite3
# drop the kiezradar database tables
DROP TABLE meinberlin_kiezradar_searchprofile;DROP TABLE meinberlin_kiezradar_kiezradarquery;DROP TABLE meinberlin_kiezradar_projectstatus;DROP TABLE meinberlin_kiezradar_projecttype;DROP TABLE meinberlin_kiezradar_searchprofile_districts;DROP TABLE meinberlin_kiezradar_searchprofile_organisations;DROP TABLE meinberlin_kiezradar_searchprofile_project_types;DROP TABLE meinberlin_kiezradar_searchprofile_status;DROP TABLE meinberlin_kiezradar_searchprofile_topics;
# quit sqlite
.quit
# activate your venv if not done already
source venv/bin/activate   
# reset kiezradar migrations
python manage.py migrate --fake meinberlin_kiezradar zero
# run migrations again
python manage.py migrate

Tasks

• PR name contains story or task reference
• Steps to recreate and test the changes
• Documentation (docs and inline)
• Tests (including n+1 and django_assert_num_queries where applicable)
• Changelog