Add permission check to light service

[balloob]

Description:

The light turn on service doesn't use the entity service helper, so needs to manually check for permissions.

Checklist:

• The code change is tested and works locally.
• Local tests pass with tox. Your PR cannot be merged unless tests pass
• There is no commented out code in this PR.

If the code does not interact with devices:

• Tests have been added to verify that the new code works.