Restrict CreateModel and CreateModelVersion to model contributors or Training tasks

CreateModel and CreateModelVersion should only be available to tasks in ProcessMode.Training processes, or contributors to a model. If the endpoint is called using Ponos task authentication, the training requirement should be enforced regardless of whether the user is a contributor. The Create model button in the frontend should still work!