only allow admins to rebuild commits

This is a check for both whether to display the button and whether to
actually do the rebuild. It slightly modifies RepoAdminHandler so it's
worth a close look.
fail when a label is passed but cannot be found; return errors so that they can be handled by RepoAdminHandler
document commit rebuild method