Enable security on Kibana query panel (fixed)

We need to allow or disallow the direct editing of Kibana query
panel, based on the Kibana JSON configuration.

This is done by introducing the 'editable' attribute on the services.query
JSON object consistently to what is currently possible with the other panels.

If the attribute is not present (default behaviour) the query panel
is completely editable and the '+' icon allows to add new queries.

**NOTE: I know that Kibana-3 is no longer developed; however please keep this pull request opened for those Kibana-3 users who need to enable/disable the query editing functionality.**