Add cohorted_threads_privacy cohort setting

Add cohorted_threads_privacy cohort setting: a user that is not in any cohort will only see non-cohorted threads.
It might be clearer to have:

```
if not group_ids and cohorted_threads_privacy(course_id) == 'cohort-only':
```