feat(datafusion): add REST management procedures

[plusplusjiajia]

Purpose

Ports apache/paimon#9410 to Rust: six CALL sys.* procedures putting the REST management API (#820, #829) behind SQL. Java chose procedures over DDL, and its SQL extension grammar has no GRANT/REVOKE/POLICY at all.

What it adds

CALL sys.grant_permission(resource_type => 'TABLE', database => 'sales',
                          table => 'orders', access => 'SELECT',
                          principal => 'user:alice')

plus revoke_permission, list_permissions, create_policy, drop_policy and list_policies. Procedure names, parameter names and optionality, and the two result schemas follow Java field for field.

Testing

Nineteen tests against the mock REST server, and an end-to-end run against a live Aliyun DLF catalog covering all six procedures, both paging filters, both if_exists paths and the duplicate-policy 409.

[JingsongLi]

Reviewed 9fbdea6. The six CALL procedures provide an end-to-end SQL path to the existing REST permission and policy APIs. I checked argument validation, resource and policy construction, the REST-only catalog boundary, pagination/result mapping, and the mock-server integration tests; I found no actionable issue. The targeted rest_management_procedures suite passed: 18 tests. The initial sandbox run could not bind the local mock server; the rerun with local socket access passed.

[JingsongLi]

+1