Fix up %REVIEW% expansions.

I worried that the use of %REVIEWERCONTACT%, instead of %REVIEWAUTHOR%,
would avoid permission checks.
SearchActions: Move towards a SearchActions class.