Prevent leaking of private repo data through API

default_branch, statistics and config_ci_path are now only exposed if
the user has permissions to the repository.