Apply `wrapTransform` in all places where `transform` is allowed

Namely,
- `find` and `findOne` on both client and server
- `allow`/`deny`
- collection constructors (as part of a previous commit)