Thread ResolvedIntent through findMissingPrivileges

[ZephyrYWZhou]

Summary

Follow-up to #5486, addressing @flyrain's review suggestion: thread the ResolvedIntent object down into findMissingPrivileges() instead of destructuring it into separate targets / secondaries arguments, so the resolved structure can evolve in the future without churning the intermediate signatures.

Tracked in #5491. That issue lists a second, larger follow-up (having each AuthorizationIntent expose its own securables to remove the resolver's per-type dispatch); this PR intentionally does only the findMissingPrivileges threading and leaves the other item for a separate PR.

Changes

• PolarisAuthorizerImpl.authorizeRbacOrThrow and findMissingPrivileges now take a single AuthorizationIntentResolver.ResolvedIntent instead of separate @Nullable List<PolarisResolvedPathWrapper> targets, secondaries.
• authorizeIntent passes the ResolvedIntent straight through instead of destructuring it at the call site.
• findMissingPrivileges reads targets / secondaries from the object at the top; the rest of its logic is unchanged.
• The public isAuthorized(...) overloads keep their existing signatures and construct a ResolvedIntent internally, so there is no public API change.

Behavior

No behavioral change. The same resolved targets/secondaries are evaluated; only the parameter shape changed. Nullability is preserved — the carrier is @NonNull, while its targets / secondaries remain @Nullable and are still guarded by the existing Preconditions.checkState in findMissingPrivileges.

Testing

• PolarisAuthorizerImplTest updated to the new signature (stubs, verifies, and one direct call); the isAuthorized stubs are unchanged.
• ./gradlew :polaris-core:check passes, along with the Ranger unit tests + intTest, the OPA tests, and the runtime-service catalog handler authz suites (IcebergCatalogHandlerAuthzTest, IcebergCatalogHandlerFineGrainedDisabledTest, PolicyCatalogHandlerAuthzTest, PolarisGenericTableCatalogHandlerAuthzTest).

Checklist

• 🛡️ Not a security issue
• 🔗 Related to Follow-up to #5486: thread resolved paths into findMissingPrivileges and let AuthorizationIntent expose its own securables #5491
• 🧪 Updated existing tests; no behavior change
• 💡 No new Javadoc needed (internal refactoring)
• 🧾 No CHANGELOG update needed
• 📚 No documentation update needed

[ZephyrYWZhou]

Thanks @flyingImer for the review and approval!

Since @flyrain originally proposed this refactoring, tagging you here for a final review and sign off.

[flyrain]

+1 thanks @ZephyrYWZhou ！

[flyrain]

Thanks @ZephyrYWZhou for the refactor. Thanks @flyingImer @dimas-b for the review!

[ZephyrYWZhou]

Thanks @flyrain!