Merge branch 'bvl-graphql-only-authorize-rendered-fields' into 'master'
Only check abilities on rendered GraphQL nodes
Closes #58647 and #60355
See merge request gitlab-org/gitlab-ce!27273
(cherry picked from commit 4d2bce77)
eca8e6f0 Only check abilities on rendered GraphQL nodes