Refactor authorization in ai self hosted models controller

What does this MR do and why?

Related to !154117 (merged)

I need to created a new authorization rule to implement the GQL node correctly. I thought I could get two birds in one stone by also refactoring ::Admin::Ai::SelfHostedModelsController