Gate company restriction fields behind permlevel 1

Restricts `restrict_to_companies` and `allowed_companies` fields to master-manager role (permlevel 1) instead of all write-access users on Item, Customer, and Supplier masters.