morebits: add preliminary FlaggedRevs/stabilize support

At the moment this returns HTTP 500. Don't know why; could be a bug in
MW.
protect: add support for Pending Changes

In theory, should work, but doesn't yet.
Merge remote-tracking branch 'origin/protect-pendingchanges'