RFC 503: Code-intel resolver sub-repo perms filtering

Created by: bobheadxi

See RFC 503

Follow-up to https://github.com/sourcegraph/sourcegraph/issues/27138, https://github.com/sourcegraph/sourcegraph/issues/27139

• Read through code for a possible central point to perform filtering, validate with code-intel
• Implementation