[Jmmt-mingrui]

Summary

• derive GRANT targets from every semantic YAML physical table reference
• apply table-scoped grants after every workspace staging commit and during example deployment
• grant system_mcp.* to all users as the database-level fallback without restoring *.*
• validate and quote Doris identifiers before building GRANT statements

Tests

• bash test/run_all_tests.sh --offline