Improve cache context, to allow edit tabs to appear after membership change
Closes #3571426
- Ensure og_entity_access() returns a forbidden result that includes the OG access result’s cacheability metadata (so membership/role changes invalidate caches).
- Ensure access results vary by og_permissions cache context for the current user.
- Add a functional test that asserts the Edit tab appears after adding membership.