fix(api): translate 403 AccessDeniedHttpException message

- Add render callback for AccessDeniedHttpException in bootstrap/app.php
- Returns translated messages.permission_denied instead of Symfony default