[FIX] project_todo: avoid evaluation of equivalent ir.rule

Since the introduction of project_todo, access to the model project.task
for interal users has been extended to read/write/create/unlink. The
basic record rule for task visibility does in consequence need to manage
only the read access. A new record rule was introduced to manage
write/create/unlink access for project users. However, the read access
for this group was also managed by this new rule, which led to
evaluation of both ir.rule for project user.

related-https://github.com/odoo/odoo/pull/115390

closes odoo/odoo#129058

X-original-commit: 0808286feb463f7618fdc2e72f010d151db8c9a3
Signed-off-by: Xavier Bol (xbo) <xbo@odoo.com>

addons/project_todo/security/project_todo_security.xml

@@ -37,6 +37,7 @@
                     # to subscribe check access to the record, follower is not enough at creation
                     ('user_ids', 'in', user.id)
         ]</field>
+        <field name="perm_read" eval="False"/>
         <field name="groups" eval="[(4,ref('project.group_project_user'))]"/>
     </record>