This change hides actions (buttons and links) in the runner list
according to the runner 'userPermissions'.

This prepares the runner list for display in non-admin views,
no user-facing changes are expected.