Added Permission.is_allowed_any and fixed Audit LHN issues

- Added is_allowed_any (checks if the user has the given action permission for *any* object of the given resource_type), used in the LHN for "Create New" and "You don't have access" testing
- Fixed Readers seeing the Create New audit link
- Fixed link URLs in the audit popover