fix(plugin-security): stage RLS membership on the write check path so a membership-keyed check resolves on a bare insert (#16607)

fix(plugin-security): stage RLS membership on the write check path so a membership-keyed check resolves on a bare insert (#16607) #32541