Fix CustomCollectionCallbacks authorizePredicate type parameter

Changed `keyof TParam & string` to `TParam` in authorize callbacks.
Since TParam is now `string` instead of `Record<string, string>`,
`keyof TParam` would incorrectly resolve to string method names
like "toString", "charAt", etc.

This fixes type checking errors introduced when refactoring collection
dispatcher types from Record-based to string-based parameters.