Show agents even if only a dev on subgroup

Issue: Show agents even if only a dev on subgroup (#434662 - closed)

What does this MR do and why?

Show agents even if only a dev on subgroup

• Do not require that users be a developer on the root group in order to use an agent to create a workspace, only need to be a developer on a subgroup containing the agent.

See issue Show agents even if only a dev on subgroup (#434662 - closed) for more details and screenshots.

Screenshots or screen recordings

See issue Show agents even if only a dev on subgroup (#434662 - closed) for before and after screenshots.

How to set up and validate locally

1. Create a group hierarchy a/b/c
2. Make a user with developer access to group a/b. The user should NOT have any access to the root group a. Log in as this user
3. Create an agent in a project 'agent-projectin groupc`
4. Create a project workspace-project with a valid devfile that is also somewhere under group b.
5. Create a workspace for workspace-project.

Previously this would fail with an error related to the agent, because the user did not have developer access to the root group.

Now it should succeed and create the workspace.

Tasks

• Implement logic
• Finish backfilling tests

MR acceptance checklist

This checklist encourages us to confirm any changes have been analyzed to reduce risks in quality, performance, reliability, security, and maintainability.

• I have evaluated the MR acceptance checklist for this MR.