Limit Features to Accounting Previewers based on PRBAC Roles and Software Plans

dependent on https://github.com/dimagi/django-prbac/pull/6

todos:
- limit ability to add mobile workers for community plans
- downgrade handling of custom `UserRole` (HQ, not PRBAC)