Task - RBAC Authz - Content Tags Drawer - Support authz-based permissions

Task - RBAC Authz - Content Tags Drawer - Support authz-based permissions

Context

With the introduction of openedx-authz for course authoring (openedx-platform#38436), users can now have course-level roles (e.g. course_editor, course_auditor) granted exclusively through authz. The content tags drawer needs updates to properly reflect these permissions in the UI.

The drawer should be tested with each course-level role to verify the UI matches their capabilities:

Known issues

UI controls don't respect can_tag_object / can_delete_objecttag response fields

The API correctly returns can_tag_object: false and can_delete_objecttag: false for users without courses.manage_tags (e.g. course_auditor), but the drawer still shows the "Add a tag" button and tag management controls. The drawer should check these fields and hide add/edit/delete controls when they are false.

Start at the content tags drawer and trace how it renders controls from the API response. Test the drawer for each listed course-level role, especially the can_tag_object and can_delete_objecttag fields. Done means auditors can view tags without add, edit, or delete controls, while authorized roles retain those controls.