Add ability to disable the cloning option and form

Created a new MR.

Added edit/clone/delete permissions and implemented custom access callbacks for routes that check both the permission and entity access.

Note that all new permissions are disabled by default. So, after merging changes, all contextual links will by hidden.
I guess it's better to merge changes to the next release e.g. 4.0.x

Hmm, yeah that is kinda breaking then. Wouldnt the correct path be adding an upgrade hook that adds the permission to the roles currently having that permission? Then its non breaking and can be disabled if you like.

+ 1 for the permission approach with update hook

Implemented an update hook to set permissions for users with authenticated role.