Define how results can be edited

[hasan7n]

Currently, the endpoint PUT /results/<id> is only accessible by the admin user.

We should define what fields should be edited and how (e.g. is_valid, approval_status), and then make it available to the result owner.