Don't return replies to hidden annotations in the bulk API

[marcospri]

Potential fix for: https://github.com/hypothesis/support/issues/66

Join on the main annotation table to find the reference to the parent, if any and check that it's visible.