Add permission 'manage protected forms' and update menu access callback

Adds a new permission 'manage protected forms' in addition to 'administer site configuration' to allow access to the protected forms configuration page.

Closes #3291212