Keep raw link when redacting unauthorized link object references

What does this MR do?

Ignore unauthorized object references links by not transforming it into raw text, using a simple <a> instead.

More information on #40502 (closed).

Screenshots (if relevant)

Does this MR meet the acceptance criteria?

• Changelog entry added, if necessary
• Documentation created/updated
• API support added
• Tests added for this feature/bug
• Review
  • Has been reviewed by Backend
• Conform by the merge request performance guides
• Conform by the style guides
• Squashed related commits together
• Internationalization required/considered
• End-to-end tests pass (package-qa manual pipeline job)

What are the relevant issue numbers?

Closes #40502 (closed)