policy: evaluate wildcard matching strategy

[aeneasr]

One issue with access control policies is that, at the moment, we have the burden of regular expression overhead. This implies that scalability is limited.

Most matches however require simple wildcard logic, like resources:* or users:*:emails. It should be explored if wildcard matches perform better in memory and in databases and decided if regexp matching will be replaced with wildcard matching, or at least complemented.

[aeneasr]

This is now up to keto/ladon, see ory/keto#11