RFC 503: GitTree resolver sub-repo perms filtering

Created by: bobheadxi

Supercedes https://github.com/sourcegraph/sourcegraph/issues/26646