[API] Extract update form collaborators endpoint from PUT /:formId/adminform

[karrui]

As tracked in #815, the current form update endpoint is doing too much.

This issue tracks the creation of a new endpoint just to updating form collaborators. The old endpoint should not be deleted for backwards compatibility (at least for a few weeks after the new endpoint has been released).

This is API-P1 (as with all PUT /:formId/adminform endpoints) as this will affect how subsets are updated in the React rewrite. Each endpoint will also have a more well defined responsibility.

New proposed endpoint

PATCH /api/v3/admin/forms/:formId/collaborators

No need for PUT/POST/DELETE HTTP methods since it is just manipulating form.permissionList array values and collaborators have no identifier to act on