[Subtask] Add Semantic Model ownership and privilege support

### Describe the subtask

Define and implement ownership and privilege support for first-class Semantic Models.

This includes:

- Define the Semantic Model privilege set and its schema-level and object-level binding semantics for list, load, create, alter, and drop operations.
- Add `SemanticModelHookDispatcher` to assign the creator as the Semantic Model owner and wire the public dispatcher chain as `SemanticModelHookDispatcher -> SemanticModelEventDispatcher -> SemanticModelNormalizeDispatcher -> SemanticModelOperationDispatcher`.
- Add Semantic Model support to entity ID resolution, metadata-object conversion, owner and role relations, cache invalidation, and deletion cleanup.
- Enforce authorization with consistent filtering and error behavior.
- Add focused tests for ownership, allowed and denied operations, relation cleanup, and cache invalidation.

This task depends on the Semantic Model entity and relational metadata-service work. Event listener and audit support are out of scope and tracked separately.

### Parent issue

#12209