Check repo permissions in campaigns mutations (except update)

Created by: mrnugget

This is part 2/3 for https://github.com/sourcegraph/sourcegraph/issues/10809 (see the checklist in that ticket for a list of tasks)

The diff got bigger because I had to write tests and that required changing some of the code, etc.

So I decided to tackle campaign-updates in a separate PR.