HTTP status code/message for requests denied because of EHR_STATUS.is_modifiable

@matijap Regarding the is_queryable limitations (which will be coming up for me to implement as well):

EHR Information Model states that is_queryable determines if an EHR is included in population queries, meaning with is_queryable=false it would still be queryable by explicitly selecting it in the FROM clause (FROM EHR [ehr_id/value=<some-id>]), but i will create a separate topic for that since i am also not quite sure if the definition of population query i gathered from the spec is the complete picture. Topic for is_queryable: Which queries should EHR_STATUS.is_queryable actually affect?