Add a --force flag

This lets you skip the prompt about updating (useful for automating, or
running from tests).
Set the executable bit

Let you just run /opt/rt4/local/plugin/RT-IR/etc/add_constituency
without needing to say perl $path and possibly choosing the wrong perl.
default_agent calls rtir_user and logs in for you
param returns the selected value(s)

We actually want the values available. This test never tested what it
was trying to test because it never looked at the available values, only
the selected (default) value of GOVNET.

There's no way this test could fail unless Constituency was empty (which
is possible for certain configurations, but not tested anywhere).  Now it
tests what it is documented to test.
Test that Constituencies limit visibility

Every other test in t/constituency/ does things as standard DutyTeam
member or does limited testing with a constituency user, but nothing
that actually exercises tickets in different constituencies and checks
visibility and access.

This test runs add_constituency so you get proper groups/queues/ACLs
which are what our users get when they set it up, rather than the
hodgepodge of random ACLs granted in t/constituency/acl.t or the
too-widely-granted rights in basics.t (giving ModifyCustomField to
Privileged?).

This then tests that if you create a bunch of tickets, users only see
the ones in their constituency (even if they load by ID) and if they do
a search (easiest to test at the API level rather than scraping around
for IDs on the homepage) they're limited to the tickets they should see.

Ideally this test would also check that they can see tickets they should
take on the homepage, and from the RTIR -> Incident Reports views, but
for now this will have to do (since it's the first actual test of
constituency permissions).
Disable and unapply the SLA CF

Because we didn't do this, you could end up with two SLA fields when
installing RT::Extension::SLA.  If you noticed this and disabled the one
on the Incident Reports queue, RT::Extension::SLA would still find and
prefer that disabled CF before finding the global CF.  We disable and
unapply the field to avoid this.

We cannot safely do this for users who have already upgraded (or
installed) RTIR 3 because it could damage a working RT::Extension::SLA
installation.
Merge branch '3.0/test-constituencies' into 3.0-trunk
Merge branch '3.0/disable-sla-cf' into 3.0-trunk
Merge branch '3.0-trunk' into 3.2-trunk

Conflicts:
	etc/add_constituency.in
Add a --force flag

This lets you skip the prompt about updating (useful for automating, or
running from tests).
In 3.2, add_constituency lives in bin/ not etc/
Turn off UseSQLForACLChecks when Constituencies are enabled.

UseSQLForACLChecks will generate sql like
select * from main tickets where (Queue = 'Incident Reports - EDUNET' OR
Queue = 'Incidents - EDUNET' ..) and (Queue = 'Incident Reports')
if you're searching for IRs, which is an impossible WHERE and you lose.

You can 'fix' this by giving AdminCc in each of the 4 primary RTIR
queues ShowTicket rights, but this is a deviation from previous rights
and I worry about performance when we have to join for 4 different role
groups every time.

This will be better in RTIR 3.4 since we're throwing away the hack and
can just use Constituencies like real queues.
Merge branch '3.2/test-constituencies' into 3.2-trunk