FQ-182: tenant access, ownership, and integration administration

[izzywdev]

Outcome

Adds organization-level administration without creating a parallel identity system.

• delegates member listing, invitations, role changes, and removal to FuzeFront security services
• derives organization identity exclusively from the validated FuzeFront session
• adds tenant-isolated repository ownership, Jira binding, and Storybook binding updates
• aligns runtime authorization keys/actions with the namespaced registered FuzeQuality product policy
• adds Organization UI for members, roles, owners, and integration settings
• expands registered product permissions for read/manage boundaries
• fails closed for cross-tenant repository identifiers and unavailable security services

Verification

• npm run type-check
• npm test (64 passed, 1 intentional Chroma integration skip)
• npm run build:web

Jira

• FQ-182
• FQ-191
• FQ-192
• FQ-193
• FQ-194

[github-actions]

Automated code review (gate-code-review)

Credit balance is too low

Report-only — this check never blocks merge.