Remove TODOs in favor of JIRAs.

portlet-definition.xml BROWSE permission syntactic sugar TODO --> UP-4071.
MarketplaceService caching TODO --> UP-4072.