sql/opt: Generate synthetic check constraint to enforce RLS policies for new rows

sql/opt: Generate synthetic check constraint to enforce RLS policies for new rows #1689