Remove _is_administrator check from settings form

#3328340: Remove use of Lightning Core code removed the use of runtime Lightning Core code from Lightning Media. However, one bit remains -- the settings form is protected by the _is_administrator requirement, which is defined by Lightning Core.

Let's remove that and replace it with the "administer site configuration" permission, and add test coverage.