Restrict roles that can resolve threads in merge request

Problem to Solve

Currently, merge request threads can be resolved by all developer and higher roles in a project as well as merge request authors (who might not even be part of the project). This leads to confusion over who or why a thread has been resolved.

Proposal

Thread resolution should be restricted to the person who leaves the comment or maintainers of a project.