Remove role restrictions on patient bulk upload

[emmastephenson]

Background

Patient bulk upload is currently only available to SimpleReport site admins (i.e., engineers). The final stage of opening the feature to end users will be changing the role restrictions to allow regular SimpleReport admins access.

Action requested

Change the authorization configuration on UploadService.processPersonCSV from RequireGlobalAdminUser to RequirePermissionEditFacility. (Technically this is a patient-related operation, but given that it will affect many patients this permission level seems more appropriate).

https://github.com/CDCgov/prime-simplereport/blob/master/backend/src/main/java/gov/cdc/usds/simplereport/service/UploadService.java#L92-L92

Acceptance Criteria

Bulk upload is available to SimpleReport admin users, not just site admins.

Additional context

This is the last piece of work to do for patient bulk upload - everything else (UI updates, error messaging, etc) should be finished before this is merged.

[georgehager]

I've looked at what's required for this, holding until other patient bulk upload changes are merged in.