Support action custom checks

### Is your proposal related to a problem?

Currently, you can unfortunately only check at the row level. But it would be really practical to check in general if the query is justified.

### Describe the solution you'd like

Add a Action permission custom check (not row based):


Also with iregex

### Describe alternatives you've considered

Currently I have no idea how to work around it. Only to add the text to each row. But with regex check it would be very slow.

The issue names no files, tests, or entry points. Start by locating the action-permission and custom-check implementation, then compare it with row-level checks and the regex path. Done should include a non-row-based action check, including the requested iregex behavior, with coverage for the resulting permission decisions.

Written by the indexing model from the issue text.