feat(rbac): drop role will transfer role owns object to account_admin

[TCeason]

I hereby agree to the terms of the CLA available at: https://docs.databend.com/dev/policies/cla/

Summary

drop role will transfer role owns object to account_admin

E.g.

create role role1;
create user u1 identified by '123' with default_role='role1';
grant role role1 to u1;

use u1 create some database then, drop the role1. In ownership-kv, the object keys value is a dropped role role1.

If admin user wants to create a new role also named role1, the new role role1 will directly has objects ownership. That maybe dangerous.

So in this pr, add a check: dorp role will check the dropped role owns some object. If true, transfer the owner to account_admin.

Note

Add forward/backward compat test.

drop role can execute in old version(1.0.307) and new version.

• Fixes #[Link the issue here]

Tests

• Unit Test
• Logic Test
• Benchmark Test
• No Test - Explain why

Type of change

• Bug Fix (non-breaking change which fixes an issue)
• New Feature (non-breaking change which adds functionality)
• Breaking Change (fix or feature that could cause existing functionality not to work as expected)
• Documentation Update
• Refactoring
• Performance Improvement
• Other (please describe):

---

This change is 

[drmingdrmer]

Consider evaluate the result returned by upsert_kv

[github-actions]

Docker Image for PR

• tag: pr-15154-3d6d7eb

note: this image tag is only available for internal use,
please check the internal doc for more details.

[TCeason]

cc @BohuTANG Already add compat test. will test drop role in old and new version. And I test the drop role in cloud dev.

This is the process:

│ tc-test1 │ Suspended │ XSmall │ │ 60 │ NULL │ 2024-04-09 03:30:02 │
│ tc-test2 │ Suspended │ XSmall │ pr-15154-3d6d7eb │ 60 │ NULL │ 2024-04-09 05:56:17 │

tc-test1 is old warehouse,
tc-test2 is this pr's version warehouse.

➜  ~👆 export BENDSQL_DSN="***&warehouse=tc-test1"
➜  ~👆 bendsql

> create role role1;
Processed in (0.738 sec)
> grant ownership on default.t to role role1;

➜  ~👆 export BENDSQL_DSN="***&warehouse=tc-test2"
➜  ~👆 bendsql

> drop role role1;
Processed in (0.732 sec)

-- the table t transfer to role account_admin
> select name, owner from system.tables where name='t' and database='default';
┌───────────────────────────┐
│  name  │       owner      │
│ String │ Nullable(String) │
├────────┼──────────────────┤
│ t      │ account_admin    │
└───────────────────────────┘