fix: prevent cross builder query jumps

Starting collection ownership is enforced when a query is created but there is nothing prevent an aggregation, knowing another builder's collection uuid, from escaping the builder's resources. Now that NUCs enable browser requests, its more likley that collection ids will be public and so we need to restrict aggregations accordingly.
