Move permission check of canReadEnvironment to BE

On the environments list page the permission check for canReadEnvironment happens on the frontend. It is passed on to a child component at least 7 times.

This permission check should happen on the backend at time of creating the entity and simply return a null/empty externalUrl and monitoringUrl if the user doesn't have permission.