Fetch allowed statuses from widget definitions

As part of the first iteration of the configurable
statuses initiative, we would like to:
* return statuses from the system-defined lifecycle
that match the work item type via GraphQL API,
* only expose the data to the Premium and
Ultimate users.