Link dedicated full-FT runs to the active team

`_dispatch_full_finetune_run` was building the payload without a
teamId, so every dispatched run landed on the caller's personal
account even when `prime config view` showed a team selected. The
LoRA path (rl.py:1216) already passes `app_config.team_id` — match
that behaviour for the full-FT path.

Backend's `CreateDedicatedRunRequest.team_id` is Optional, so the
prior omission was silently wrong instead of returning a 400.

Author: JannikSt

packages/prime/src/prime_cli/api/training.py

@@ -57,6 +57,7 @@ def build_payload_from_toml(
     cfg: Dict[str, Any],
     *,
     name: Optional[str] = None,
+    team_id: Optional[str] = None,
     image_tag: Optional[str] = None,
     wandb_api_key: Optional[str] = None,
     hf_token: Optional[str] = None,
@@ -73,13 +74,16 @@ def build_payload_from_toml(
     What stays out of `config`:
       - secrets (wandb / hf): materialised into a per-run k8s Secret,
       - run name: lives on the platform's RFTRun row, not the TOML,
+      - team_id: links the RFTRun to a team for billing/access scoping,
       - image_tag: chart-level (which prime-rl image to pull).
 
     Cluster targeting is backend-side (auto-pick first uncordoned).
     """
     payload: Dict[str, Any] = {"config": cfg}
     if name:
         payload["name"] = name
+    if team_id:
+        payload["teamId"] = team_id
     if image_tag:
         payload["imageTag"] = image_tag
     if wandb_api_key:

packages/prime/src/prime_cli/commands/rl.py

@@ -749,6 +749,15 @@ def _dispatch_full_finetune_run(
 
     name = raw_cfg.get("name")
 
+    # Link the dispatched run to the user's active team (same convention
+    # as the LoRA path at line 1216). Without this, the RFTRun row gets
+    # team_id=None and lands on the caller's personal account even when
+    # the CLI is configured for a team — confusing for billing + access
+    # scoping. Backend's `CreateDedicatedRunRequest.team_id` is Optional,
+    # so omitting it is silently wrong rather than a 400.
+    app_config = Config()
+    team_id = app_config.team_id
+
     # Resolve env files relative to the config dir, same convention as the
     # LoRA path. We don't validate WANDB presence here — the chart wires
     # WANDB_API_KEY via secretKeyRef only if `[wandb]` is configured AND
@@ -785,6 +794,7 @@ def _warn(msg: str) -> None:
     payload = build_payload_from_toml(
         raw_cfg,
         name=name,
+        team_id=team_id,
         wandb_api_key=secrets.get("WANDB_API_KEY"),
         hf_token=secrets.get("HF_TOKEN"),
     )