Lock down the 'lock as security issue' feature

Summary:
Require membership in trusted projects to lock a task.
Users can still lock tasks that they created themself, otherwise
they must be a member of WMF-NDA, Trusted-Contributors or #acl*operations-team.

Bug: T162026

Differential Revision: https://phabricator.wikimedia.org/D1069