Fix EZP-23037: Subtree criterion in Legacy Storage Content search does not scale

This PR resolves issue https://jira.ez.no/browse/EZP-23037

As described in JIRA, in order to avoid the change of behaviour this introduces separate Subtree criterion to be used by permission system. `ezcontentobject_tree` is always joined to be used for Subtree limitation conditions.
Good catch, I removed the extension of Subtree criterion in https://github.com/ezsystems/ezpublish-kernel/commit/e30d1de5c3ccefa563dc6760dd376199db4b2e4f, as the order of handlers should not be relevant.