Support resource filters for entitlement push config

Split from #2316

There should be support for determining which resource is pushed to which entitlement push target.

There are two possibilities: entitlement push config or [resource attribute](https://github.com/CSCfi/rems/issues/2736).

- [ ] add `:entitlement-push` support for regex based filter (e.g. send all resources where id starts with `EGAD`)
- [ ] multiple filters support (could even be that each is the unique ID of the resource)