Allow admins and org owners to change org member public status

[Tomeamis]

Allows admins and org owners to change org member public status.

Before, this would return Error 403: Cannot publicize another member despite the fact that the same user could make the same change through the GUI.

Fixes #28372

[yp05327]

Use organization.IsOrganizationOwner or ctx.Org.Organization.IsOwnedBy?

[Tomeamis]

@yp05327 Like this?

[yp05327]

Can be simpler.

if userToPublicize.ID != ctx.Doer.ID && !ctx.Doer.IsAdmin {
	isOwner, err := ctx.Org.Organization.IsOwnedBy(ctx, ctx.Doer.ID)
	if err != nil {
		ctx.Error(http.StatusInternalServerError, "IsOwnedBy", err)
		return
	}
	if !isOwner {
		ctx.Error(http.StatusForbidden, "", "Cannot publicize another member")
		return
	}
}

[Tomeamis]

@yp05327 That is indeed better, updated. Thanks for the suggestion.

[wxiaoguang]

If there could be some tests, and I could vote my approval.

[wxiaoguang]

Added some tests in 6e9b8a9