* track-changes: enforce write and review permissions on review actions
- Toggling track changes and accepting changes need write access
- Resolving, reopening and deleting a thread use ensureUserCanDeleteOrResolveThread
- Deleting a reply needs write or review access, and reviewers may only delete their own replies
* track-changes: leave the reviewer own-reply check out of deleteMessage
- Deleting a reply is limited by the route only, so reviewers can still delete any reply
- Memory was set at the top level of the create options, which Docker ignores, so compile containers had no memory limit
- Move it into HostConfig with the 1 GiB the comment intended (the old value was 1 TiB)