BED-9679: normalize credential permission metadata

[jaredcatkinson]

Summary

• normalize PAT, PAT request, and app installation permissions into query-friendly scope:access lists
• separate organization and repository permission buckets for fine-grained PATs and PAT requests
• update credential node docs and Tier Zero rules for the normalized permission shape

Testing

• uv run pytest
• uv run ruff check src/openhound_github/models/permissions.py src/openhound_github/models/personal_access_token.py src/openhound_github/models/personal_access_token_request.py src/openhound_github/models/app_installation.py src/openhound_github/models/workflow.py src/openhound_github/models/workflow_job.py tests/test_credential_permission_models.py

[coderabbitai]

Important

• 🔍 Trigger review

This repository does not receive automatic reviews because it has fewer than 10 stars.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Advanced

Run ID: a9ca071f-9d7f-4fac-86ee-439ec25d5d79

---

_{Comment @coderabbitai help to get the list of available commands.}