Render 404 when polling commit notes without having permissions

Closes #39176

See merge request gitlab-org/gitlab-ce!15140