This update tightens employee access to internal model metadata and adjusts enterprise apps to use safer access methods behind the scenes. Business users should see no workflow changes, but the change reduces the risk of exposing sensitive technical configuration data across accounting, documents, helpdesk, HR, payroll, localization, and marketing features.

Enterprise part of odoo/odoo#69120

Remove read access on ir.model, ir.model.fields, ir.model.fields.selection and ir.model.data for employees.
To access such records, the code must use the helpers (_get, ref,...) instead of CRUD operations directly.

Part of task-id 8203