feat(spec,plugin-security): publish the caller's resolved permission SETS on the security service (#7616)

feat(spec,plugin-security): publish the caller's resolved permission SETS on the security service (#7616) #1449