Answer
There isn't a single built-in feature that automatically surfaces every affected projection action grant ahead of time — using a grants-management tool to align permissions with the actions actually exposed on the UI, combined with deliberate pre-upgrade testing of key roles, is the practical approach rather than expecting the upgrade process to flag every permission gap itself.