Add failing specs.
Add one or two more checks for kicks.
Allow people who can see the MM to create a card.
DRY up task policy logic and use shared examples.
Consolidate papers policy logic.

Use shared examples for tests.
Add edit back to papers policy.
Unbreak tasks policy during create action
WIP
[#813011200]
Merge pull request #532 from Tahi-project/adhoc-403

Allow users who can see a paper's manuscript manager to create new cards for it.