Keep author-only visibility pushdown ahead of pagination and COUNT
candidate budgets for existing HTTP and WebSocket reads, with a
PostgreSQL regression exercising each auth mode using its existing
identity contract.
Rebased onto current main; the two original commits are combined.
Signed-off-by: Logan Johnson <loganj@squareup.com>