Add `APPLICANT_PARTNER` visibility to staff comment visibility (#3832)

Fixes #3831. Somehow this slipped through both me & user testing but all
works well now. Also swapped so staff comment logic gets evaluated
first, thus if staff submits an application (usually for testing) then
goes to make a comment to another application they won't be stuck with
applicant options for visibility.