Have different ACLs for `Add Manual Testing` and `Add Test Result`

With the recent feature of being able to add manual test results, it would be nice to decouple the ACLs for creating a "Test Plan" and add "Test Results", so that different levels of privileges can do each action.

I guess a `change_testplan` permission could be introduced for that and tied to the "Test Plan" objects creation.