#1119 - issues with manuscript review

Targets #1119 (closed)

Summary

1. Removed the roles defined for addReviewer mutation and set it to allow any. This mutation is also used when a non-admin or non-editor user accepts a review invite and the front-end makes a mutation call to add that person as the reviewer. Because of the roles, the front-end was instead getting an error as an unauthorized request.
2. When calculating the data to show in the user dashboard, the backend queries all the versions for a manuscript and picks the last one. Because the list of versions is sorted by created desc, the latest version was set as the first version. The updated code now picks the first item from the list, which would point to the latest version.
3. Removed the isAuthenticated check for invitationStatus permission. This API call is made right after a user clicks on accept review link from their email and it's possible they are not already logged-in into the Kotahi application.
4. Made a minor fix for macOS cache file to be ignored by git