Fix `is_allowed` Mustache helper

* don't infer context or resource type from `GGRC.page_instance()`
* require explicit context if `resource_type` is given as a string