feat(security)!: reconcile SharingRule authoring with the enforced runtime — group→team, +business_unit, prune guest + owner-type (#1878) (#3557) · objectstack-ai/objectstack@503be86