fix(api): require edit access for trace config changes

[laipz8200]

Summary

• Require app edit access and tracing-config RBAC permission before trace config create, update, or delete requests run.
• Keep trace config reads unchanged.

Screenshots

N/A

[github-actions]

Pyrefly Type Coverage

Metric	Base	PR	Delta
Type coverage	51.32%	51.33%	+0.01%
Strict coverage	50.83%	50.84%	+0.01%
Typed symbols	30,543	30,559	+16
Untyped symbols	29,252	29,252	0
Modules	2929	2930	+1

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 85.32%. Comparing base (3aa26fb) to head (64b29a7).
⚠️ Report is 4 commits behind head on main.

Additional details and impacted files

@@            Coverage Diff             @@
##             main   #37973      +/-   ##
==========================================
- Coverage   85.32%   85.32%   -0.01%     
==========================================
  Files        4932     4932              
  Lines      255717   255737      +20     
  Branches    48454    48456       +2     
==========================================
+ Hits       218183   218197      +14     
- Misses      33290    33294       +4     
- Partials     4244     4246       +2     

Flag	Coverage Δ
api	85.57% <100.00%> (-0.01%)	⬇️
dify-ui	94.94% <ø> (ø)
web	84.86% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.