codeintel: add sub-repo permissions filtering during code intel diagnostics query
Created by: sashaostrikov
Should be merged after https://github.com/sourcegraph/sourcegraph/pull/29328
Closes https://github.com/sourcegraph/sourcegraph/issues/29241