Restrict activity.json to only show public messages #5159

#5159 

#### Changes

* In the menu callback for `"/activity.json"` (used by ossap_stats to aggregate messages), modify EntityFieldQuery to add a new condition for `field_private_message_value = VSITE_ACCESS_PUBLIC`