Add tests for RLS to show that PK / UNIQUE constraints reveal keys

Ideally we'd check the RLS predicate before permitting the write, so an
appropriately set RLS predicate would prevent the query getting to the point
where it checks the unique constraint and fails.
Test case to demonstrate that RLS leaks information via unique_violation