Fix membership edit crash when only complements update is allowed

`can_member_update?` returns true when complement updates are allowed,
but the membership edit page only handles depot changes. When depot
update is disabled, the form renders empty and submitting it raises
`ActionController::ParameterMissing: param is missing or the value
is empty or invalid: membership`. Guard both the edit link and the
controller action with `can_member_update_depot?`.

Author: thibaudgg

app/controllers/members/memberships_controller.rb

@@ -26,7 +26,7 @@ def load_membership
   end
 
   def ensure_member_can_update_membership!
-    redirect_to members_memberships_path unless @membership.can_member_update?
+    redirect_to members_memberships_path unless @membership.can_member_update? && @membership.can_member_update_depot?
   end
 
   def membership_params

app/views/members/memberships/_membership.html.erb

@@ -2,7 +2,7 @@
   <h2>
     <%= membership.fiscal_year %>
 
-    <% if membership.can_member_update? %>
+    <% if membership.can_member_update? && membership.can_member_update_depot? %>
       <%= link_to edit_members_membership_path(membership), title: t(".edit"), class: "ml-1 p-3" do %>
         <%= icon "pencil-square", class: "mb-1 inline size-5 text-gray-400 dark:text-gray-500 hover:text-green-500 dark:hover:text-green-500" %>
       <% end %>