Add permission view_commit_author_statistics

Also add this permission to all default data roles that have the
view_changesets permission.
Deny access to repository commit author stats for unauthorized users
Don't embed commits per author graph for unauthorized users