Add specific permissions for suppression and deletion.

Grant these to the repository manager and project manager roles.
Add an 'advanced data entry' role.
Show suppressed records to users with suppress_archival_record permission too.