Legal API: add some allowable actions

- [ ] whether the user is allowed to see the Staff Comment component and enter a new staff comment
- [ ] whether the user is allowed to enter a Detail Comment
- [ ] whether the user is allowed to go to the Digital Credentials page
- [ ] whether the user is allowed to download the Business Summary
- [ ] reference RFC that shows how these actions fit in with the existing allowable actions being returned in business response.

Example json payload should be under design details. https://github.com/bcgov/entity/blob/main/rfcs/rfc-colin-states-mapping-to-lear.md