Enforce UserWriteMask for special attribute writes

[kevinherron]

Motivation

• Fix a privilege escalation where writes to authorization-relevant attributes could bypass per-user UserWriteMask checks for RolePermissions and Historizing attributes.
• Prevent an unchecked IllegalArgumentException path when UserRolePermissions is evaluated by WriteMask.forAttribute.

Description

• Apply the UserWriteMask check to all non-Value attribute writes before running the special-case RolePermissions and Historizing role-permission checks in DefaultAccessController.
• Treat UserRolePermissions as explicitly denied during the UserWriteMask evaluation (exclude it from the WriteMask.forAttribute lookup) so it cannot trigger WriteMask.forAttribute's default exception while preserving non-writability semantics.
• Retain the existing role-permission checks for RolePermissions and Historizing after the UserWriteMask check and short-circuit further checks when UserWriteMask denies access.
• Add regression tests in DefaultAccessControllerTest that cover denial and allowance scenarios for RolePermissions, Historizing, and UserRolePermissions w.r.t. UserWriteMask.

---

Codex Task