Separate platform inspection from customer decision authority

Cross-organization inspection must not imply customer decision authority. Model membership provenance and customer-scoped team sets explicitly when a platform role can inspect customer data while mutations remain customer-owned.

Require persisted customer membership with the appropriate role for adjudication. Keep a real customer member constrained to that customer’s team scope even if the same person also has a platform-wide inspection role. A generic role label such as admin is insufficient authorization provenance.