Allows giving more compact and user-meaningful names if desired.
If used, makes in-ZODB data (processing/validation roles) independent
from process' network binding, removing the need to re-configure
CMFActivity after changing network.
Also, update AlarmTool usage of getCurrentNode (and related).
Also, replace AlarmTool's manageAlarmNode input field with a select for
convenience.

Activating constraints is the job of configurator.
I left account_type constraint though, because without this Balance Transaction
creation may not work as expected.

erp5_accounting: Improve Delivery_localBuild to call invoice_builder_alarm only if exist, because in some projects this alarm does not exist

erp5_core: Add External method to access getSecurityCategoryFromAssignmentParentFunctionParentGroup from extensions.erp5.StandardSecurity

Without this script is not possible access the method to generate security policy which will be able to combine parent (for group and function) plus strict base category

Added a security policy which is able to combine parent (for group and function) plus strict base category. It can be useful to generate groups as function* + group* + site, for example.

Predicate security is checked at higher levels

Inventory API does not depend on security
Also fix some pylint complains

smtp_url can be None, so do not treat it as string, allow to take different
actions (like doing nothing).