Allow admins to override subscription type for resources with "Bypass Auth" = true

Non-GLRI allocations have a customizable "subscription type" that can be "core", "community", "costshare", etc. and is used for reporting. However, resources with "Bypass Auth" are assumed to be public and thus always assumed to have subscription type "public_core" (or "public_glri"). However, some resources like ajcp have "Bypass Auth" on for technical reasons and are not truly public. We just need to relax our artificial restriction and let GALILEO Admins recategorize the subscription type for these resources.

The default subscription type for these can remain "public_core"/"public_glri". It just needs to be overridable. Ideally a public_glri allocation could only be changed to "glri" (and maybe "none"?) and a public_core allocation could be changed to any of the non-GLRI types.