bundle: fix genie_space permissions URL prefix

The genie_space permissions prefix was registered as "/genie/spaces/",
which parsePermissionsID interprets as 4 segments and routes to
PUT /api/2.0/permissions/genie/spaces/<id>. That endpoint does not
exist; the workspace API returns 404 ENDPOINT_NOT_FOUND, which is what
motivated the earlier rejection mutator.

The actual permissions path is /api/2.0/permissions/genie/<id>
(3 segments, RequestObjectType="genie"). This matches:
  - the SDK iam path builder at service/iam/impl.go (uses
    "/api/2.0/permissions/%v/%v")
  - the CLI's own "databricks permissions get/set genie <id>" command,
    which lists "genie" as a valid REQUEST_OBJECT_TYPE
    (cmd/workspace/permissions/permissions.go)

Fix the bundle prefix and the matching testserver whitelist entry,
which both had the same wrong path and therefore masked the bug in
acceptance tests. Regenerate the affected acceptance fixtures.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

Author: longchass

acceptance/bundle/resources/permissions/genie_spaces/current_can_manage/out.plan.direct.json

@@ -44,7 +44,7 @@
           ]
         },
         "vars": {
-          "object_id": "/genie/spaces/${resources.genie_spaces.foo.id}"
+          "object_id": "/genie/${resources.genie_spaces.foo.id}"
         }
       }
     }

acceptance/bundle/resources/permissions/genie_spaces/current_can_manage/out.requests.deploy.direct.json

@@ -1,6 +1,6 @@
 {
   "method": "PUT",
-  "path": "/api/2.0/permissions/genie/spaces/[FOO_ID]",
+  "path": "/api/2.0/permissions/genie/[FOO_ID]",
   "body": {
     "access_control_list": [
       {

bundle/direct/dresources/all_test.go

@@ -481,7 +481,7 @@ var testDeps = map[string]prepareWorkspace{
 		}
 
 		return &PermissionsState{
-			ObjectID: "/genie/spaces/" + resp.SpaceId,
+			ObjectID: "/genie/" + resp.SpaceId,
 			EmbeddedSlice: []StatePermission{{
 				Level:    "CAN_MANAGE",
 				UserName: "user@example.com",

bundle/direct/dresources/permissions.go

@@ -18,7 +18,7 @@ var permissionResourceToObjectType = map[string]string{
 	"apps":                    "/apps/",
 	"clusters":                "/clusters/",
 	"dashboards":              "/dashboards/",
-	"genie_spaces":            "/genie/spaces/",
+	"genie_spaces":            "/genie/",
 	"database_instances":      "/database-instances/",
 	"postgres_projects":       "/database-projects/",
 	"jobs":                    "/jobs/",

libs/testserver/permissions.go

@@ -25,7 +25,7 @@ var requestObjectTypeToObjectType = map[string]string{
 	"sql/alerts":              "alert",
 	"sql/queries":             "query",
 	"dashboards":              "dashboard",
-	"genie/spaces":            "genie-space",
+	"genie":                   "genie-space",
 	"experiments":             "mlflowExperiment",
 	"registered-models":       "registered-model",
 	"serving-endpoints":       "serving-endpoint",