[backend] check user access before merging and add new capa to bypass (#7043)

[JeremyCloarec]

Proposed changes

• check user access to all merge dependencies before merging
• add new BYPASSMERGE capa to bypass this check

Related issues

• User can merge entities without the full visibility of entities merged #7043

Checklist

• I consider the submitted work as finished
• I tested the code for its functionality
• I wrote test cases for the relevant uses case (coverage and e2e)
• I added/update the relevant documentation (either on github or on notion)
• Where necessary I refactored code to improve the overall quality

Further comments

[codecov]

Codecov Report

Attention: Patch coverage is 79.16667% with 5 lines in your changes missing coverage. Please review.

Project coverage is 66.21%. Comparing base (1aa3e4b) to head (a9e9a98).
Report is 8 commits behind head on master.

Files with missing lines	Patch %	Lines
...latform/opencti-graphql/src/database/middleware.js	81.81%	4 Missing ⚠️
...pencti-graphql/src/database/data-initialization.js	0.00%	1 Missing ⚠️

Additional details and impacted files

@@            Coverage Diff             @@
##           master    #7761      +/-   ##
==========================================
- Coverage   66.21%   66.21%   -0.01%     
==========================================
  Files         597      597              
  Lines       60422    60436      +14     
  Branches     6207     6206       -1     
==========================================
+ Hits        40011    40017       +6     
- Misses      20411    20419       +8     

Flag	Coverage Δ
	66.21% <79.16%> (-0.01%)	⬇️

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

[labo-flg]

What's the status on this PR @JeremyCloarec ?