HPT admin access should not be needed for collection route

Problem/Motivation

Someone who can create, edit, or delete hpt entities should ahve access to the collection route.

Proposed resolution

Add a route provider that extends the admin default route provider and OR's a few permissions together.

I learned about OR-ing here: https://www.drupal.org/node/2341759