feat: owner read-only view-as from team users table

Allow org owners to inspect any member's data scope via dual JWT; server blocks mutations and team page stays reachable for return.

Co-authored-by: Cursor <cursoragent@cursor.com>

apps/web/src/router/index.ts

@@ -500,9 +500,13 @@ router.beforeEach((to) => {
   const roles = to.meta.roles as UserRole[] | undefined;
   if (roles?.length) {
     const role = auth.user?.role as UserRole | undefined;
-    if (!role || !roles.includes(role)) {
-      return { name: 'home' };
+    if (role && roles.includes(role)) {
+      return true;
     }
+    if (to.name === 'team-settings' && auth.user?.viewAs?.canOpenTeamSettings) {
+      return true;
+    }
+    return { name: 'home' };
   }
   return true;
 });