AccessResolver

Resolves the active access level id for a property so the overlay convert path can omit role-restricted overlays without every caller (BuildingLayers / MapPlotterForProperty) having to thread the role through. MapstedMapApi registers one resolver backed by the published UserRoleAccess; an empty/blank result means "property default" = allow all (fail-open per product rule).