[TASK] Centralize checkPid functionality

The functionality to check authentication such
as frontend users only to certain PIDs, is now centralized
in FrontendUserAuthentication along with the logic
to use the common API with "userConstraints()" to enable
a query restriction only to certain PIDs.

This way, all restrictions are unified in the enable clause

Further refactorings could be
* use a service or event to modify the constraints in a unified way,
  or even move the constraints completely to the auth service.
* use a UserRepository that should deal with the constraints

Resolves: #98587
Releases: main
Change-Id: I5ad4743a4f8d149509553b8cdda2f6210ca98c61
Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/76098


Tested-by: core-ci <typo3@b13.com>
Tested-by: Christian Kuhn <lolli@schwarzbu.ch>
Tested-by: Stefan Bürk <stefan@buerk.tech>
Reviewed-by: Christian Kuhn <lolli@schwarzbu.ch>
Reviewed-by: Stefan Bürk <stefan@buerk.tech>