Only Render Plan's "Add a Contributor" Button For Users With Sufficient Permissions

[aaronskiba]

Fixes #3439

Changes proposed in this PR:

• This PR adds a conditional to the plan's "Add a contributor" button.
  • Adding the if @plan.editable_by?(current_user.id) permission check prevents users with "Read only" access from accessing the button.