Profile-level toggle to hide dashboard "Send Email" and "Snapshot"

The Send Email and Snapshot buttons are always exposed on the dashboard header, with no way to keep a dashboard visible while turning these off for standard users. Add profile-level permission checkboxes that fully remove (not just disable) these controls from the header unless the profile explicitly enables them.