Fix delegatable permissions

[yndajas]

Next steps:

• add a method to check if there are delegatable permissions that a granter can grant a grantee for an app, then use that to determine whether to show the update permissions link
• filter updatable permissions by delegatable for publishing managers
• add a note to edit page to say that there might be non-delegatable permissions, with a link to view all permissions for the user
• any more fixes to the policy/its application - e.g. fix the authorisation in the controller actions

---

This application is owned by the publishing platform team. Please let us know in #govuk-publishing-platform when you raise any PRs.

⚠️ This repo is Continuously Deployed: make sure you follow the guidance ⚠️

Follow these steps if you are doing a Rails upgrade.