Renamed allowed-merge-apps to bypass-apps

[cuba0001]

Related to #2394

1. Renamed allowed-merge-apps to bypass-apps in the TOML files and schema.rs.
2. To maintain backward compatibility and avoid deserialization errors in triagebot, I kept the old allowed_merge_apps field in the public rust_team_data::v1 schema with its values copied from the new.
3. The deprecated field can be removed in a follow-up PR after updating and deploying triagebot.

[rustbot]

rust_team_data/src/v1.rs has been modified, it is used (as a git dependency) by multiple sub-projects like triagebot, the www.rust-lang.org website and others.

If you are changing the data structures, please make sure that the changes are not going to break serde deserialization (adding a field is fine; removing or renaming a field isn't).

If you must do a breaking change to the format, make sure to coordinate it with all the users of the rust_team_data crate.

[github-actions]

Dry-run check results

[WARN  rust_team::sync] sync-team is running in dry mode, no changes will be applied.
[INFO  rust_team::sync] synchronizing crates-io
[INFO  rust_team::sync] synchronizing github

[rustbot]

This PR was rebased onto a different main commit. Here's a range-diff highlighting what actually changed.

Rebasing is a normal part of keeping PRs up to date, so no action is needed—this note is just to help reviewers.