In preparation of deploying OATH to (a limited number of users) on prod, deploy a similar configuration in beta.
The extension is only enableable by users with the oath-enable user right, which will initially only be given to the Staff global group. This way we don't have users enabling it, locking themselves out, etc, until we figure out the best process for managing it.
- Add db table in beta
- deploy config change (https://gerrit.wikimedia.org/r/#/c/280676/)