[FIX] base: Remove label from views if user groups forbid the field

Without this patch, if a view defines a `<label for="forbidden_field"/>` anywhere, the web client tries to fetch the field data, but since the user has no access, it gets an error.

Now, if the label targets a forbidden field, it gets removed from the view, as happens with the related field. The client doesn't know of that field's existence and no errors happen.

closes odoo/odoo#28755

Signed-off-by: Thibault Delavallee (tde) <tde@openerp.com>