Allow consumer to disallow some methods on a resource

[sgleizes]

It is very common to work with a partial CRUD for read-only and generated resources.

For example, attempting to PATCH a read-only resource should respond with a 405 Method Not Allowed and an Allow header indicating the methods allowed for that endpoint, just like the OPTIONS method.