#371 - Add can_administer to JSON.

Indicates which pipelines user has administration access to.
#371 - can_administer, settings_path to pipeline.

can_administer and settings_path in the JSON were at pipeline instance
level. But, ability to administer and the path for the settings of the
pipeline are not for the instance. They're for the whole pipeline. So,
moving that out.
#371 - Add support for pipeline lock data.

Provides two new bits of information:

1. is_locked: Is the pipeline currently locked?

2. unlock operation: If it is locked, and can be unlocked by
   the user, then an unlock operation will be present.
Merge remote-tracking branch 'duck/fix_dashboard_json_can_administer_and_locking' into fix_dashboard_json_can_administer_and_locking