feat: prohibit non admin writes to system spaces

src/access_control.rs

src/cas.rs

src/storage.rs

test/conftest.py

test/int/test_acl.py

test/int/test_cas.py