Allow users who can see a paper's manuscript manager to create new cards for it.

-- FW & CW & FF

* Change TasksPolicy.create? to be less exclusive
* Collapse duplicated criteria in `TasksPolicy` into private methods for now
* Start creating shared examples for Policies to reduce test time and errors in specs.