[Feature Request] Finish out template resolvers

[golanglemonade]

• Add authorization checks
• Ensure regular users cannot create roottemplates, these are seeded into the database and owned by the datum system
• Add tests