fix(query): Skip checking the privilege about the user stage @~

[flaneur2020]

I hereby agree to the terms of the CLA available at: https://databend.rs/dev/policies/cla/

Summary

Currently the privilege check on PRESIGN will forbid any data insertion from a public role, as it's not able to PRESIGN @~/, like:

cloudapp@tnf34b0rm--yazhou.gw.aliyun-cn-beijing.default.databend.cn:443/book_db> PRESIGN UPLOAD @~/test1.txt;
error: APIError: ResponseError with 1063: Permission denied, privilege [Write] is required on STAGE cloudapp for user 'cloudapp'@'%' with roles [public]

@/~ is considered as a private stage owned by the user, every user have his/her own stage, and it's a necessary data path on the client drivers.

this pr may have conflict with #13821, we can have a wait after it.

changes in this PR:

• added validate_access_stage to encapsulate the prechecks on stage
• avoid checking privilege on @~ to avoid it breaks the data ingestions path
• move the rbac tests back to stateless to make it easier to run in the local dev environment, while left stage related tests in the stateful

---

This change is