feat: enforce per-category land access permissions

Enforces per-industry access for direct item use and entity scripts, with land-wide fallback and safe handling for multi-category entities. Validates and persists settings from the client. Depends on oss_pixels_commons!12 (merged).