refactor: centralize filesystem permissions precedence #14945

Job	Run time
Local Bazel build on ubuntu-24.04 for x86_64-unknown-linux-musl	6m 40s
Local Bazel build on ubuntu-24.04 for x86_64-unknown-linux-gnu	6m 41s
Local Bazel build on macos-15-xlarge for aarch64-apple-darwin	11m 10s
Local Bazel build on macos-15-xlarge for x86_64-apple-darwin	11m 10s
	35m 41s

Provide feedback