Also introduced helpers for getting entities by slugs since we do it in so many places.
Not totally happy with implementation as is requires extra service to be injected to core controllers, but does the job. Included test to cover. Updated some controller properties to be typed while there.
Including testing to check permissions applied to listed references.
