Limited role users can add/remove participants

**Describe the bug**
The Limited role is described as cannot "Add or remove participants", but this is not true. Limited role users can in fact invite participants and import participant CSVs.

**To Reproduce**
Steps to reproduce the behavior:
1. Invite a user with a Limited role to an event
2. On this Limited user, go to the Participants page of the event
3. Invite another email as a participant

**Expected behavior**
Fail with a permission error / invite button does not exist

**Screenshots**
N/A

**Desktop (please complete the following information):**
- OS: macOS
- Browser: Zen
- Version: idk

Reproduce the issue from the Participants page using a Limited-role user, then trace the permission checks for participant invitations and CSV imports. Done means Limited users cannot invite participants or import participant CSVs, with the expected permission error or no invite control, while permitted roles retain access.

Written by the indexing model from the issue text.