[python] Reject vector and full-text search on a query-auth table

[plusplusjiajia]

Problem

Java refuses vector and full-text search whenever the table carries query authorization (TableQueryAuthResult.rejectSearchUnderQueryAuth): the index ranks raw values, which a column mask invalidates.

Python planned the search instead. PrimaryKeyVectorScan and PrimaryKeyFullTextScan then unwrapped the QueryAuthSplit the scan had produced and kept the bare data split, so neither the mask nor the row filter reached the result.

Change

Port the refusal to the vector, batch-vector, full-text and hybrid builders. It sits in the methods that build a scan or a read rather than in the builder constructors, matching Java: a deserialized builder skips a constructor check.

The guard is gated on isinstance(table, FileStoreTable) like Java's instanceof check, so tables that cannot carry authorization are unaffected.

[JingsongLi]

Requirement fit: SUPPORTED (triage: GO)\nImplementation: CLEAN\n\nThis closes a concrete authorization bypass by refusing raw-value index searches on query-authorized tables, matching the Java behavior. I checked vector, batch-vector, full-text, and hybrid construction and deserialized-builder paths; the guard is applied before a search plan or read can unwrap authorization. No actionable P0/P1/P2 issue found.