Cannot use an RLS rule that `JOIN`s with a private table

Reproduction:

#[table(name=test, public)]
struct Test {
	#[primary_key]
	#[auto_inc]
	id: u64,
}

#[client_visibility_filter]
const TEST_FILTER: Filter = Filter::Sql("SELECT test.* FROM test JOIN test_access ON test.id = test_access.id WHERE user_id = :sender");

#[table(name=test_access)]
struct TestAccess {
	#[primary_key]
	id: u64,
	user_id: Identity,
}

Compiles and publishes successfully, but when querying it fails with:

`test_access` is not a valid table

Should be a pretty obvious case to add a more complex restriction logic based on some private (sensitive) fields.

Start with the client_visibility_filter/RLS path represented by TEST_FILTER and reproduce the published query failure involving test and private test_access. Trace why the private table is rejected at query time despite successful compilation and publication. Done means the JOIN-based filter works while test_access remains private, with coverage for the authorized filtering behavior.