Hide loggedin/private joinable resources from other tenants

Currently joinable resources from public tenants are treated as being viewable by users in other public tenants. This should not be the case. This impacted both activity propagation and general search filters which are fixed in this PR.

Confirmed that the actual permission logic when joining is correct in that it does not allow external users to join a loggedin/private group.