Get sanctions user bootstrap

Requires permission: SanctionsAccess

The create/filter bootstrap for the calling user: their permission rows, accessible houses and subjects, and the create/filter/admin flags that drive the sanctions screens.