Merge Requests: tightened the can_be_merged_by(user) check
Noticed while reviewing the change of this method in GitLab 13.9.5 that they would not be applied for Mercurial projects, because the publish permission check trumps everything else. This made sense a year ago, but nowadays, it's better to have the general GitLab condition and the publish permission check.