[Cherry-pick to branch-1.3] [#13859] fix(authz): expose inaccessible object tag and policy associations (#13863)

[roryqi]

What changes were proposed in this pull request?

Backport #13863 to branch-1.3.

Add authorization-filtering indicators to metadata object tag and policy list responses:

• hasInaccessibleTags
• hasInaccessiblePolicies

The indicators are included in both name and detailed responses. Direct and inherited associations are aggregated before authorization filtering.

Why are the changes needed?

When all associated tags or policies are inaccessible, the APIs currently return an empty list indistinguishable from an object with no associations.

The new fields indicate whether associations were omitted without exposing their names, count, details, or inheritance source.

Fix: #13859

Does this PR introduce any user-facing change?

Yes. Metadata object tag and policy list responses add boolean fields indicating whether inaccessible associations were omitted.

How was this patch tested?

• Common response DTO unit tests
• Metadata object tag and policy REST tests
• Metadata authorization helper tests
• Tag and policy Docker authorization integration tests
• ./gradlew :docs:build
• Spotless checks

[github-actions]

Code Coverage Report

Overall Project	69.12% +0.07%	🟢
Files changed	83.0%	🟢

Module	Coverage
aliyun	19.74%	🔴
api	47.62%	🟢
authorization-common	85.96%	🟢
authorization-ranger	10.17%	🔴
aws	53.54%	🟢
aws-bundle	0.0%	🔴
azure	32.1%	🔴
azure-bundle	0.0%	🔴
catalog-common	19.13%	🔴
catalog-fileset	80.73%	🟢
catalog-glue	71.33%	🟢
catalog-hive	80.55%	🟢
catalog-jdbc-clickhouse	84.7%	🟢
catalog-jdbc-common	51.06%	🟢
catalog-jdbc-doris	83.12%	🟢
catalog-jdbc-hologres	54.03%	🟢
catalog-jdbc-mysql	81.8%	🟢
catalog-jdbc-oceanbase	78.6%	🟢
catalog-jdbc-postgresql	83.89%	🟢
catalog-jdbc-starrocks	79.16%	🟢
catalog-kafka	75.49%	🟢
catalog-lakehouse-generic	61.21%	🟢
catalog-lakehouse-hudi	79.1%	🟢
catalog-lakehouse-iceberg	85.98%	🟢
catalog-lakehouse-paimon	82.17%	🟢
catalog-model	77.99%	🟢
cli	44.51%	🟢
client-java	78.31%	🟢
client-java-runtime	0.0%	🔴
common	51.51% +0.48%	🟢
core	83.8%	🟢
filesystem-hadoop3	77.68%	🟢
flink	18.07%	🔴
flink-common	50.82%	🟢
flink-runtime	0.0%	🔴
gcp	32.2%	🔴
hadoop-common	15.43%	🔴
hive-metastore-common	62.61%	🟢
hive-metastore3-libs	58.8%	🟢
iceberg-aliyun-bundle	0.0%	🔴
iceberg-common	60.39%	🟢
iceberg-rest-server	75.24%	🟢
idp-basic	86.79%	🟢
integration-test-common	0.0%	🔴
jobs	60.37%	🟢
lance-common	29.23%	🔴
lance-rest-server	60.7%	🟢
lineage	59.39%	🟢
optimizer	82.92%	🟢
optimizer-api	42.56%	🟢
server	89.66% +0.12%	🟢
server-common	78.58% -0.37%	🟢
spark	28.57%	🔴
spark-common	48.61%	🟢
trino-connector	62.84%	🟢

Files

Module	File	Coverage
common	NameListResponse.java	93.33%	🟢
	TagListResponse.java	92.86%	🟢
	MetadataObjectPolicyListResponse.java	88.89%	🟢
	MetadataObjectTagListResponse.java	88.89%	🟢
	PolicyNameListResponse.java	88.89%	🟢
	TagNameListResponse.java	88.89%	🟢
	PolicyListResponse.java	72.22%	🟢
server	MetadataObjectPolicyOperations.java	92.05%	🟢
	MetadataObjectTagOperations.java	91.86%	🟢
server-common	MetadataAuthzHelper.java	73.16%	🟢