[FIX] hr_expense: don't allow attachement edition/create from expense sheet

The attachment should be create and linked to
the expense directly, and not on the expense
report (where it is readonly).