Add a permission specific to unlocking orders

So with this, we're no longer checking that the order can be updated, is that intended? I guess the permission should be sufficient, but still feels weird to allow unlocking an order if you cannot update the order.

Hi,
Please add steps to reproduce this issue.

This issue was created by module owner after discussion in slack. No steps to reproduce required