fix: stale app access cache

[rohan-chaturvedi]

Summary

• Fix stale environment access shown in UI after removing and re-adding a member or service account to an app
• Add GetAppEnvironments to refetchQueries in add/remove mutations for both members and service accounts

Details

The ManageUserAccessDialog and ManageAccountAccessDialog components query GetAppEnvironments with a memberId to display each member's environment scope. When a member was removed and re-added, these cached query results were never invalidated, causing Apollo to serve stale data showing the old environment access until a hard page refresh.

Test plan

• Add a user to an app with access to multiple environments
• Remove the user from the app
• Re-add the user with access to only a single environment
• Verify the UI immediately shows the correct (single) environment scope without needing a page refresh
• Repeat the above steps for a service account