Issue #3167716: Unpublished variation access

I applied the patch from https://www.drupal.org/files/issues/2020-08-27/commerce_product-unpublished_variation_access.patch with minor adjustments against 8.x-2.x and in the test.