Implement custom Ash Policy Check that reads permissions from PermissionSets module and applies scope filters to Ash queries.