Authorize copy and move destination for the create granular permission

[AndyButland]

Prerequisites

• I have added steps to test this contribution in the description below

Fixes: #19269

Description

This PR corrects the copy and move document operations to check for the "create" permission on the target.

It also adds an interceptor for 403 responses so we can display a more informative error message.

Testing

• Set up an editor with permissions to copy, move, delete update and publish only.
• Use the editor to copy or move an existing document
• Verify that an API error is now surfaced.

[Copilot]

Pull Request Overview

This PR ensures that copy and move document operations validate the "create" permission on the destination item before proceeding.

• Introduces separate authorization checks for the source (copy/move) and destination (create) permissions.
• Updates both MoveDocumentController and CopyDocumentController to improve security and error handling.

Reviewed Changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated no comments.

File	Description
src/Umbraco.Cms.Api.Management/Controllers/Document/MoveDocumentController.cs	Added explicit destination permission check; verify if the subsequent combined authorization is necessary
src/Umbraco.Cms.Api.Management/Controllers/Document/CopyDocumentController.cs	Split the authorization checks for source and destination using granular permission logic

Comments suppressed due to low confidence (1)

src/Umbraco.Cms.Api.Management/Controllers/Document/MoveDocumentController.cs:56

• [nitpick] Review whether the combined authorization check (line 56) is necessary given the separate source and destination checks performed above. If the earlier checks provide the required granularity, consider removing the duplication to simplify the authorization logic.

AuthorizationResult authorizationResult = await _authorizationService.AuthorizeResourceAsync(

[iOvergaard]

Looks good to me. The failing E2E test does not seem to be related to these changes.