Field-level permissions for agent-only ticket fields

Portal customers could set agent-only fields (priority, sla, response_by) on their own tickets through the REST API. Now gated behind permission levels.