[Actions] disallow is_write outside of actions api (#24712)

* disallow writable queries outside of actions api

- handles cards, dashboards, embedding and pulses
- tests for disallowing writable query execution
- fix namespace decl

* fix ns decl

* use `false?` to avoid any nil cards causing a 405

* check that the card is there

* Revert "check that the card is there"

This reverts commit 5b56e2d00291bd21c0461a0567537769b5f73a83.

* Revert "use `false?` to avoid any nil cards causing a 405"

This reverts commit 72569d353ee5830f37d1a14c46289afbe511841b.