Add per-content-type permissions for Canvas Override, Reset Canvas layout, and Edit Canvas default template tabs

Problem/Motivation

Canvas Override only provides global permissions. Sites with multiple enabled content types cannot grant access to Canvas layouts on one type without granting access to all others.

Proposed resolution

Generate three dynamic permissions per enabled content type, following Drupal core's NodePermissions pattern:

• use canvas override for {bundle}
• reset canvas layout for {bundle}
• edit canvas default template for {bundle} (restricted)

Titles use the %type_name: Description convention so permissions group by content type in the permissions UI.

• CanvasOverridePermissions — generates three permissions per enabled bundle.
• CanvasTabAccessCheck and CanvasResetAccessCheck — check per-bundle permissions alongside global ones.
• hook_menu_local_tasks_alter — tab visibility checks include per-bundle permissions for all three tabs.
• CanvasOverridePermissionsTest — unit tests updated (8 tests, 98 assertions).

Remaining tasks

• ✅ File an issue
• ✅ Addition/Change/Update/Fix
• ✅ Testing to ensure no regression
• ✅ Automated unit testing coverage
• ✅ Automated functional testing coverage
• ➖ UX/UI designer responsibilities
• ✅ Readability
• ✅ Accessibility
• ✅ Performance
• ✅ Security
• ✅ Documentation
• ✅ Code review by maintainers
• ✅ Full testing and approval
• ✅ Credit contributors
• ✅ Review with the product owner
• ✅ Release notes snippet
• ✅ Release canvas_override-1.0.0-alpha2

API changes

• N/A

Data model changes

• N/A

Release notes snippet

• feat: #3583255 Add per-content-type permissions for Canvas Override, Reset Canvas layout, and Edit Canvas default template tabs