chore: allow retool write to read organization

Author: Marfuen

packages/db/prisma/migrations/20250711204234_add_read_permission_for_where_clause_on_retool_role/migration.sql

@@ -0,0 +1,8 @@
+DO $$
+BEGIN
+    IF EXISTS (SELECT 1 FROM pg_roles WHERE rolname = 'retool_write') THEN
+        -- Grant SELECT permission (needed for WHERE clause)
+        GRANT SELECT ON "Organization" TO retool_write;
+    END IF;
+END
+$$;