Catch private tables in RLS rules at publish time

[joshua-spacetime]

Right now you can publish a module that has references to private tables in RLS rules. We don't catch this because the module owner is the one who publishes and they have access to private tables, however any other client that triggers those RLS rules will receive a table not found error.