fix: sync RBAC whitelist when dataset permission is set to all team

[GareArc]

Summary

• Cherry-picks feat: when knowledge permission is all team need update rbac setttings #38911 (dataset RBAC whitelist sync when permission is set to all-team) onto hotfix/1.15.0-fix.10.
• Also pulls in feat: create app init rbac scope to all and add workspace members. #38636 as a required ancestor (app-creation RBAC whitelist + initialize_created_app_rbac_access_task), since feat: when knowledge permission is all team need update rbac setttings #38911 builds on it and it wasn't present on this branch.
• Regenerated packages/contracts/generated/api/console/workspaces/{types,zod}.gen.ts after conflict resolution to match actual Flask-RESTX route models.
• Removed an unused test helper (_add_tenant_account_join) left over from conflict resolution that referenced unimported types and was never called.

Test plan

• pytest on RBAC/account/app-response/task unit tests: 509 passed
• ruff check . clean
• pnpm gen-api-contract re-run to verify generated contracts match backend route models

[github-actions]

Pyrefly Diff

base → PR

--- /tmp/pyrefly_base.txt	2026-07-14 10:48:33.093966064 +0000
+++ /tmp/pyrefly_pr.txt	2026-07-14 10:48:24.582908128 +0000
@@ -6854,6 +6854,8 @@
    --> tests/unit_tests/services/retention/workflow_run/test_restore_archived_workflow_run.py:760:71
 ERROR `in` is not supported between `Literal['not found']` and `None` [not-iterable]
    --> tests/unit_tests/services/retention/workflow_run/test_restore_archived_workflow_run.py:907:16
+ERROR Argument `SimpleNamespace` is not assignable to parameter `session` with type `Session` in function `services.account_service.TenantService.iter_member_account_id_batches` [bad-argument-type]
+   --> tests/unit_tests/services/test_account_service.py:693:81
 ERROR Argument `_FakeWriteSession` is not assignable to parameter `session` with type `scoped_session[Unknown]` in function `services.agent_app_feature_service.AgentAppFeatureConfigService.update_features` [bad-argument-type]
    --> tests/unit_tests/services/test_agent_app_feature_service.py:102:21
 ERROR Object of class `FromClause` has no attribute `create` [missing-attribute]
@@ -7612,6 +7614,8 @@
    --> tests/unit_tests/tasks/test_human_input_timeout_tasks.py:117:43
 ERROR Argument `SimpleNamespace` is not assignable to parameter `form_model` with type `HumanInputForm` in function `tasks.human_input_timeout_tasks._is_global_timeout` [bad-argument-type]
    --> tests/unit_tests/tasks/test_human_input_timeout_tasks.py:119:43
+ERROR Object of class `Task` has no attribute `queue` [missing-attribute]
+  --> tests/unit_tests/tasks/test_initialize_created_app_rbac_access_task.py:11:12
 ERROR No matching overload found for function `python_http_client.exceptions.HTTPError.__init__` called with arguments: (MagicMock, Literal['Unauthorized']) [no-matching-overload]
    --> tests/unit_tests/tasks/test_mail_send_task.py:656:83
 ERROR No matching overload found for function `python_http_client.exceptions.HTTPError.__init__` called with arguments: (MagicMock, Literal['Forbidden']) [no-matching-overload]

[github-actions]

Pyrefly Type Coverage

Metric	Base	PR	Delta
Type coverage	51.41%	51.41%	-0.00%
Strict coverage	50.92%	50.92%	-0.00%
Typed symbols	30,678	30,687	+9
Untyped symbols	29,270	29,280	+10
Modules	2933	2935	+2