Enforce and correctly describe permissions on domain server lifecycle ops

ServerStartHandler, ServerRestartHandler and ServerStopHandler need:

1) setRuntimeOnly() added to the SimpleOperationDefinitionBuilder build of their OperationDefinition. This will open these ops to the Operator role.

2) A permission check trigger added to the Stage.RUNTIME handling. This will result in actual permission enforcement.