fix(superset): change admin bypass RLS filter type from Base to Regular

The admin_engineer_analyst_course_scope_bypass filter was configured as
filter_type 'Base', which Superset OR-combines with all Regular filters
sharing the same group_key (course_scope). This caused instructor queries
to receive (instructor_subquery OR 1=1), making the row-level restriction
trivially true and exposing all course data to instructors.

Changing to filter_type 'Regular' ensures Superset applies only the
filter(s) matching the current user's role — instructors get the course
subquery, admins/engineers/analysts get 1=1 (unrestricted).

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Author: blarghmatey

src/ol_superset/policies/ol_rls_policies.json

@@ -35,8 +35,8 @@
     },
     {
       "name": "admin_engineer_analyst_course_scope_bypass",
-      "description": "Base filter that exempts Admin, ol_data_engineer, and ol_data_analyst from all course-scope and term-expiry RLS on per-learner datasets. Engineers and platform admins need unrestricted access for pipeline development, data validation, and support. Data analysts (including education technologists supporting course teams across multiple courses) need unrestricted cross-course and cross-platform visibility for institutional analysis.",
-      "filter_type": "Base",
+      "description": "Regular filter that exempts Admin, ol_data_engineer, and ol_data_analyst from all course-scope and term-expiry RLS on per-learner datasets. Engineers and platform admins need unrestricted access for pipeline development, data validation, and support. Data analysts (including education technologists supporting course teams across multiple courses) need unrestricted cross-course and cross-platform visibility for institutional analysis.",
+      "filter_type": "Regular",
       "group_key": "course_scope",
       "clause": "1 = 1",
       "tables": [