merge branch 'edit_delete_annotations-2' into develop

Clean up edit and delete for merging.

- Reconcile differences with develop
- Anonymize deletes
- Simplify privacy directive -- no more crazy privacy getLevel stuff,
  back to a much simpler check for world read permission.
- Editing/Deleting is now "inline" in the viewer, in the thread.
start with old text on edit
proper default perms and userAuthorize

We don't allow actions on empty permissions arrays, which is how
we enforce, e.g., not revivifying deletes. As a result, we need
a custom userAuthorize function for the Permissions plugin so that
these actions are denied.
consistent heatmap updating on changes
bump annotator-store requirement