ddl: fix 'alter table cache' error when SEM is enabled

[tiancaiamao]

What problem does this PR solve?

Issue Number: close #34069

Problem Summary:

What is changed and how it works?

When SEM(Security Enhanced Mode) is enable, the system tables are not allowed to modify.
'alter table cache' need to insert a record to the mysql.table_cache_meta table, so it get that error.

Use ExecRestrictedSQL instead of ExecuteInternal ...
The difference is, ExecuteInternal just set an internal flag and still using the current session, and it does check privilege.
In contrast, ExecRestrictedSQL get a sessionctx from the session pool to execute the sql, and it does not check privilege.

Check List

Tests

• Unit test
• Integration test
• Manual test (add detailed scripts or steps below)
• No code

Side effects

• Performance regression: Consumes more CPU
• Performance regression: Consumes more Memory
• Breaking backward compatibility

Documentation

• Affects user behaviors
• Contains syntax changes
• Contains variable changes
• Contains experimental features
• Changes MySQL compatibility

Release note

Please refer to Release Notes Language Style Guide to write a quality release note.

None

[ti-chi-bot]

[REVIEW NOTIFICATION]

This pull request has been approved by:

• hawkingrei
• lcwangchao

To complete the pull request process, please ask the reviewers in the list to review by filling /cc @reviewer in the comment.
After your PR has acquired the required number of LGTMs, you can assign this pull request to the committer in the list by filling /assign @committer in the comment to help you merge this pull request.

The full list of commands accepted by this bot can be found here.

Reviewer can indicate their review by submitting an approval review.
Reviewer can cancel approval by submitting a request changes review.

[sre-bot]

Code Coverage Details: https://codecov.io/github/pingcap/tidb/commit/57d3c96f9d5e1d2775eb309bbe6d8e8fb4bbb1d3

[tiancaiamao]

/merge

[ti-chi-bot]

This pull request has been accepted and is ready to merge.

Commit hash: 41db260

[ti-srebot]

cherry pick to release-6.0 in PR #34759

[sre-bot]

TiDB MergeCI notify

🔴 Bad News! [1] CI still failing after this pr merged.
These failed integration tests don't seem to be introduced by the current PR.

CI Name	Result	Duration	Compare with Parent commit
idc-jenkins-ci-tidb/integration-common-test	🔴 failed 4, success 7, total 11	9 min 47 sec	Existing failure
idc-jenkins-ci/integration-cdc-test	🟢 all 34 tests passed	25 min	Existing passed
idc-jenkins-ci-tidb/sqllogic-test-2	🟢 all 28 tests passed	7 min 7 sec	Existing passed
idc-jenkins-ci-tidb/integration-ddl-test	🟢 all 6 tests passed	6 min 24 sec	Existing passed
idc-jenkins-ci-tidb/common-test	🟢 all 12 tests passed	6 min 18 sec	Existing passed
idc-jenkins-ci-tidb/tics-test	🟢 all 1 tests passed	6 min 5 sec	Existing passed
idc-jenkins-ci-tidb/sqllogic-test-1	🟢 all 26 tests passed	5 min 16 sec	Existing passed
idc-jenkins-ci-tidb/integration-compatibility-test	🟢 all 1 tests passed	3 min 33 sec	Existing passed
idc-jenkins-ci-tidb/mybatis-test	🟢 all 1 tests passed	3 min 18 sec	Existing passed
idc-jenkins-ci-tidb/plugin-test	🟢 build success, plugin test success	4min	Existing passed