[OPIK-4714] [FE] Edit dataset permission

[anastasiapyzhik]

Details

Add a new canEditDatasets permission to control edit-level access to datasets and evaluation suites in the frontend. This separates "edit" actions (add/edit items, expand with AI, manage tags, edit dataset metadata) from "delete" actions, enabling more granular role-based access control.

Changes:

• Introduced DATASET_EDIT management permission and wired it through the permissions provider
• Conditionally hide edit-related UI elements (add item, edit, expand with AI, manage tags, row click to edit, version history actions) based on canEditDatasets
• Conditionally hide the actions column when no actions are available to the user
• Adjusted tag rendering to show immutable tags when user lacks edit permission
• Made the download action always visible (no longer gated behind showDownload prop)
• Added separator between menu items only when both edit/download and delete actions are visible

Change checklist

• New canEditDatasets permission added to Permissions type and defaults
• DATASET_EDIT enum value added to ManagementPermissionsNames
• Permission wired through useUserPermission hook and PermissionsProvider
• DatasetItemsActionsPanel — hides "Expand with AI", tag management, and delete buttons
• DatasetRowActionsCell — hides "Edit" menu item, removes showDownload prop
• VersionHistoryTab — hides actions column when user cannot edit
• EvaluationSuiteItemsPage — tags rendered as immutable when user cannot edit
• EvaluationSuiteItemsTab — hides add item button, row actions, disables row click
• EvaluationSuitesPage — hides actions column when no actions available

Screenshots

Testing

• Verify that users with dataset_edit permission can see all edit actions (add, edit, expand, tags, delete items)
• Verify that users without dataset_edit permission cannot see edit-related actions but can still view datasets and export
• Verify that the actions column is hidden when the user has no available actions
• Verify that tags are shown as immutable (read-only) for users without edit permission
• Verify default permissions (OSS mode) still allow full access

Issues

OPIK-4714

Documentation

N/A

[aadereiko]

I think this PR can't be merged as there is an enrormous PR with dataset changes coming from Yaroslav #5367

[aadereiko]

The code LGTM :) Good work!