Resolve "Bulk editing group issues only works with owner access level"

What does this MR do?

https://gitlab.com/gitlab-org/gitlab-ee/issues/12921

Fixes authorisation in Groups::BulkUpdateController, to allow users with Reporter access level (or higher) to bulk update group issues as specified in the documentation.

Does this MR meet the acceptance criteria?

Conformity

• Changelog entry
• [-] Documentation created/updated or follow-up review issue created
• Code review guidelines
• Merge request performance guidelines
• Style guides
• [-] Database guides
• [-] Separation of EE specific content

Performance and testing

• Review and add/update tests for this feature/bug. Consider all test levels. See the Test Planning Process.
• [-] Tested in all supported browsers