Make replies public by default 

Includes an updated permissions plugin that allows partial permissions to be specified in a `beforeAnnotationCreated` hook https://github.com/hypothesis/annotator/pull/75.

Now defaults all replies to public. I looked into just inheriting the parent annotation but that was far more complex, so this just fixes 99% of the core issue and we can look into the rest later.