Extend table redirects applicability

[findepi]

Apply table redirections in more statements.

reusing @phd3 comment #10577 (comment)

IMO for every operation, we'd want to either (1) use redirected table handle OR (2) fail if a table is getting redirected. this would be safer than silently trying to get source table handle, especially for future usages. @findepi @losipiuk @electrum

If we've consensus on that, we can start with callsites where we know we want to definitely redirect. Then, separately, add a change that disallows redirection for "vanilla" Metadata#getTableHandle (or introduce a Metadata#getOriginalTableHandle).

table with some further amendments

operation	use redirected table handle / disallow if redirected	why?	ACL checks
comment table	use redirected table handle	coherent with future describe / show create	check on target
comment column	use redirected table handle	coherent with future describe / show create	check on target
Add column	use redirected table handle	coherent with future select	check on target
create table	do not follow redirect when checking existence	shouldn't create a table if it resolves to a "redirected" table	check on source (only option)
drop column	use redirected table handle	coherent with future select	check on target
drop table	use redirected table handle (checking existence)	drop table x failure --> describe table x success is confusing	check on target
grant privilege, deny privilege	disallow if redirected	limited connector support, listPrivileges API needs to change	check on target
rename table	use redirected table handle¹	should source / target / everything in between be renamed? simpler to disallow	check on target
revoke	disallow if redirected	limited connector support, listPrivileges API needs to change	check on target
set table authorization	???² disallow if redirected
rename column	use redirected table handle	coherent with future select	check on target
applyTableScanRedirect	allowed	this is unrelated, put here for reference only
extract spatial joins	use redirected table handle	name comes from SP, seems fine either way. may require some refactoring	seems missing currently
show create table	use redirected table handle	coherent with future select
show grants	disallow if redirected

¹) #10577 (comment)

²) #10577 (comment) cc @kokosing

[findepi]

I put the table above using #10577 (comment) as reference + further modifications based on the discussion there.

@electrum @phd3 @losipiuk @sopel39 @findinpath @kokosing please review

[kokosing]

set table authorization

I think this should be coherent with grant and revoke

[findepi]

Thanks @kokosing for confirming. Updated above table.

[phd3]

thanks @findepi. lgtm.

[findepi]

rename table | use redirected table handle¹

This depends on #11281 being accepted as a bug and resolved.

[findinpath]

@findepi please add in the table above also DENY command (I am assuming that it should follow the same policies as GRANT and REVOKE)