Entity operations links don't respect permissions

Problem/Motivation

Recurring Events provides permissions for cloning/editing events. When viewing a given series or instance, tabs are shown depending on the associated permission; that's working. However, if you navigate to the Event Series or Event Instances listing pages, the Operations pull down button shows some operations regardless of the permission.

Steps to reproduce

1. Install and enable the module.
2. Add a couple of event series (and thus event instances).
3. Create a role that has access to view the event series and instance overview pages, but does NOT have any create/update/delete/clone permissions for events.
4. Add a user with that role and log in as that user.
5. Navigate to the Event Series listing page (/admin/events/series). Observe that the "Clone" and "Add instance" operations are incorrectly shown.
6. Navigate to the Event Instances listing page (/admin/events/instances). Observe that the "Clone" and "Edit" operations are incorrectly shown.

Proposed resolution

Add permission checks to recurring_events_entity_operation() in recurring_events.module.
Use the 'update' operation instead of the 'edit' operation for checks in EventSeriesAccessControlHandler::checkAccess and EventInstanceAccessControlHandler::checkAccess.