Move {Ref,Change,Project}Control into permissions package

This is the last commit of a longer series to hide the internal
implementation of Gerrit's permission schema and have all calls go
through PermissionBackend.

This commit moves all Control classes into server/permissions to avoid
direct calling from other classes in server/project.

Change-Id: Ifc8f0d3838fefafbb69bb4f0dfc5ca513a41b906

java/com/google/gerrit/server/project/RefPatternMatcher.java

@@ -83,7 +83,7 @@ public abstract class RefPatternMatcher {
     }
   }
 
-  static class ExpandParameters extends RefPatternMatcher {
+  public static class ExpandParameters extends RefPatternMatcher {
     private final ParameterizedString template;
     private final String prefix;
 
@@ -148,7 +148,7 @@ public abstract class RefPatternMatcher {
       return ImmutableSet.of();
     }
 
-    boolean matchPrefix(String ref) {
+    public boolean matchPrefix(String ref) {
       return ref.startsWith(prefix);
     }