Unify access control

It's been the third time I published something without setting it to public.

I mostly published playgrounds so far and I'm used to being able to change access control from the manifest.yaml.

Since I can open the content as the author, I don't notice that little lock telling me it isn't public.

I would very much prefer being able to set access control settings from yaml, the same way as I do for playgrounds.