New contributions API and permissions

Leverage new format to incorporate contributions and define, localize and implement permissions as per https://github.com/my-koop/service.website/issues/346.
since core itself doesn't contribute to this, this line could crash because `contributions` could be undefined