Issue #3515844 logging, Drush UX, docs, functional test

EntityAccessService::rebuild() now injects a Drupal logger channel, wraps the per-entity loop in try/catch with notice/info/error logs that reach dblog, and passes $delete = FALSE to writeAccessRecords() since the upfront truncation makes the per-entity DELETE redundant. The Drush rebuild command grows an --all flag; the default no-args invocation now processes only entity types whose needs-rebuild flag is set. README and Drush help describe the partial-results window during a rebuild.

Add a MoonBase entity as a second access-controlled type in the test module, plus two sub-modules (generic and rocket_ship-specific access records hooks) and a BrowserTestBase functional test that installs and uninstalls each sub-module and asserts which entity types get flagged.