Allow /remove_time_spent for only some roles

Description

Currently, everybody can use the quick_action /remove_time_spent and it delete all timelogs of all people on the issue/mr. If one developper use this quick_action, we lose all time tracking (of other developers) of the issue/mr.

Proposal

I propose to add a configuration to choose the roles allowed to use /remove_time_spent, at the project level.

Links / references