Change the PR flag API endpoints to use commit flags
Basically, instead of flagging the PR object, we're flagging the commit
at the top of the PR.
Similarly, when retrieving PR flags, retrieve commit flags instead.
Fixes https://pagure.io/pagure/issue/4835
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>