[core] Add privilege checks for partition and consumer ops

[cxzl25]

Purpose

Tests

[JingsongLi]

• PrivilegedCatalog overrides only the two-parameter createPartitions(identifier, partitions) method.
• The method it inherits from, DelegateCatalog.createPartitions(identifier, partitions, ignoreIfExists), directly calls the wrapped catalog, bypassing the newly added INSERT permission check.
• Using the three-parameter API (regardless of whether ignoreIfExists is true or false) still allows partitions to be created without permission.
• You must override the three-parameter method and call assertCanInsert.