veyron/services/identity, veyron/tools/identity: Ability to add user
chosen caveats to blessings from identity server.

* Form now has a nice caveat selector input for define caveats.
Screenshot: https://screenshot.googleplex.com/bzV5FiUAax.png
* The selector is populated from the map in services/identity/blesser/caveats.go.

TODO:
* Change oauth flow from identity tool to open form to allow specified caveats.
This way caveats will only be input into the identity server directly so we
don't have to "trust" the identity tool.

FUTURE CLEANUP:
* Eventually should move all JS/CSS to a new assets directory in identity server and serve from
there instead of embedding into template.

Change-Id: I4eb86e2c06c01b7a31659b7b29535e0d21972f7a
2 files changed
tree: 9f01d69181efe31c9f81b4e29aed5e35a1a6f5bf
  1. lib/
  2. profiles/
  3. runtimes/
  4. security/
  5. services/
  6. tools/