[security] SchemaRelation.has_perm grows to new arguments allowing to specify subject/object entity type when actual eid are not known, but their types are

# sync and restart to make sure cwuri does not appear in forms
sync_schema_props_perms()