EXISTS subquery support in policy expressions
I added support for EXISTS (SELECT FROM ...) subqueries in the SQL policy expression parser, and fixed a bug where the outer row's ID wasn't being resolved correctly in policy conditions. This lets you write more expressive permission rules.