Verify organization can see plan for instance

Previously, a user was able to create an instance of a private plan
under an organization that could not actually see that plan, so long as
the user belonged to some other organization that could.

[#51524041]
Validate space guid on service instance creation.

[#51524041]
Refactor service_plan_visibilities and service_instance api
Bump errors submodule

Needed a version that includes error ServiceInstanceOrganizationNotAuthorized
Fix service bindable flag migration for MySQL
User sees error when binding unbindable service

[Finishes #49522433]
Delete model.png

no longer accurate
Delete ilia_tour

no longer accurate
Change user provided service label

[Finishes #53600459]
Fixed broken migration for the environment_json encryption