Replace use of injected canBulkEditEpics and canCreateProjects

What does this MR do and why?

This change moves two user permission checks (canCreateProjects and canBulkEditEpics) from HAML injection initialization to being dynamically fetched from the GraphQL query.

References

• Closes #542147
• Closes #542148

Screenshots or screen recordings

N.A.

How to set up and validate locally

1. Create a Group and a project in it
2. Do not add any issues
3. Verify if the Group > Issues have New project button for user's with permissions
4. Go to Group > Epics
5. Verify if the Bulk Edit option is available for the user

MR acceptance checklist

Evaluate this MR against the MR acceptance checklist. It helps you analyze changes to reduce risks in quality, performance, reliability, security, and maintainability.

Related to #542148