Option to keep product editors from editing products in admin-only categories

Some teams use admin-only categories to control which products their product editors may change. We're adding a role permission, Edit products in admin-only categories, under Settings → Users & access → Permissions.

It's on by default, so nothing changes unless you turn it off. Turned off, users with that role can view products in admin-only categories but not change them. Their own categories keep working as they do now.