add :editable, :visible to permitted_params of custom_fields

see: https://www.openproject.org/work_packages/3312

suggested changelog entry:

<pre>* `#3312` [Administration - Custom Fields] "Visible" and "Editable" in user custom field cannot be unchecked</pre>