allow replies to a note (bug 888707)

**Notes**

* adds permissions to `CommunicationThreadNote` model.
* adds an endpoint like `/comm/thread/1/note/2/replies/` (`GET` to list replies to a note, `POST` to add one)
* a note on creation derives its permissions from its parent thread. A reply to a note, derives its permissions from the parent note.