[Forward port to 10.1/trunk] constrain document translation with security domain (automatically derived from user session)

Please forward port REPO-1303 from branch to trunk

Clone description:
-------------------------
In the document view, the translations dropdown shows options to add translations if they don't exist yet, based on the couplings of the root folders.

But if access to those coupled root folders have been restricted for the logged in user using domains, these options should be hidden. When the option is used, a dialog shows, titled 'Exception', with "Unable to find root folder for language nl" and 'An error occurred, please retry.' It's more logical if the option would not show.

In code, I traced it down to the call
available = new HippoTranslatedNode(highestTranslatedNode).getTranslations(); in org.hippoecm.repository.translation.impl.TranslationWorkflowImpl#hints, and then to
org.hippoecm.repository.translation.HippoTranslatedNode#getTranslations in which a query to find coupled root nodes is used with a workflowuser session (rootSubject) and not the logged-in user session (userSubject).

Because the workflow user is used, all coupled root folders are found.