Implement EZP-22479: SiteAccessLimitation support for use in new login system

Changes SiteAccessLimitation to accept SiteAccess object as the value object to enable support for doing the following in login code:

```php
$repo->canUser( 'user', 'login', $siteAccess )
```