Audit MJ core entity schema permissions

There may be other core MJ entities beyond `MJ: Datasets` and `MJ: Dataset Items` where `EntityPermission` records have incorrect write flags — either missing permissions that should exist or permissions granted that shouldn't be. This was never systematically audited.

**Action needed:**
- Review all core MJ entity `EntityPermission` records for `cdp_Developer`, `cdp_Integration`, and `cdp_UI` roles
- Verify `GRANT EXECUTE` exists on all SPs where write permissions are enabled
- Fix any gaps found and emit corrections via CodeGen or migration in v5.16