Do not grant download_code access to Planner role

The project ability download_code was granted to the Planner role in !169256 (merged) because it is required for reading Merge Requests. Given this ability grants access to other features that shouldn't be accessible for the role, we need to find a way to grant access to read MRs without enabling download_code.