Check quotation write permission before marking lost

Validates write permission before the `declare_enquiry_lost` endpoint modifies a Quotation.