heroku sharing:{add,remove} manager API fixes

- sharing:add uses "/collaborators"
- sharing:remove uses manager API when appropriate