Sharee with the Editor role can delete the owner's shared folder using its id #3770

A WebDAV DELETE on the share root by its id deletes the shared folder of the owner. The request returns 204, and the folder is gone from the owner's space and ends up in the owner's trash bin. Through the Shares jail the same action only declines the share, and moving the share root by its id fails with 409.

Steps:

1. alice shares the folder folderToShare (containing inside.txt) with brian as Editor.
2. brian sends DELETE /dav/spaces/<folderToShare remoteItem.id, using the remoteItem.id from GET /graph/v1beta1/me/drive/sharedWithMe.

Expected: 403, nothing changes.

Actual: 204, folderToShare is gone from alice's personal space and ends up in her trash bin.

This also happens with a guest-link session, where access by id is the normal way to reach a share.

Tests: apiSpacesDavOperation/deleteByFileId.feature:14 and apiGuestLink/guestLinkSecurity.feature:111