fix: Disabled remote and fetch transport in permissions

[mesemus]

Description

(See PR in docs for context)

This fix restricts RDM permissions to only include the local and multipart transfer types in the default permissions. Users can still enable additional transfer types by following the documentation steps, which involve:

1. Overriding the permission policy
2. Setting up allowed domains in the invenio.cfg file

This PR also adds tests demonstrating that fetch and remote transports are disabled by default.

Note: This PR depends on invenio-drafts-resources#307.

Checklist

Ticks in all boxes and 🟢 on all GitHub actions status checks are required to merge:

• I'm aware of the code of conduct.
• I've created logical separate commits and followed the commit message format.
• I've added relevant test cases.
• I've added relevant documentation.
• I've marked translation strings.
• I've identified the copyright holder(s) and updated copyright headers for touched files (>15 lines contributions).
• I've NOT included third-party code (copy/pasted source code or new dependencies).
  • If you have added third-party code (copy/pasted or new dependencies), please reach out to an architect on Discord.

Frontend

• I've followed the CSS/JS and React guidelines.
• I've followed the web accessibility guidelines.
• I've followed the user interface guidelines.

Reminder

By using GitHub, you have already agreed to the GitHub’s Terms of Service including that:

1. You license your contribution under the same terms as the current repository’s license.
2. You agree that you have the right to license your contribution under the current repository’s license.