Built-in feature services should not allow external updates

[claustres]

Services providing data like Hub'Eau, Vigicrues, etc. should not allow any write operation from an external client in order to prevent data removal.

[claustres]

It should be possible to configure such a service to allow to push/remove features from an external source when creating a layer to store eg sensor data like LAB (#233) but in this case we should probably use the API Gateway and the token should be checked for the right to do so in the app. We could also possibly use a webhook as suggested in Akt'n'Map (kalisio/crisis#103). The last option is to use the available permission system in the KDK to manage this.