Shared RSP ownership policies for NBN resources.
Injects the standard three-tier policy into any RSP-owned resource:
- nil actor → bypass (internal Perentie calls)
- admin role → bypass
- create with RSP actor → allowed (rsp_id stamped by SetRspId)
- read/update/destroy → RSP can only access its own records