Require ReadInstance permission in ConnectorService handlers

[nishantmonu51]

The ConnectorService handlers (ListBuckets, ListObjects, OLAPListTables, OLAPGetTable, ListDatabaseSchemas, ListTables, GetTable) performed no permission checks, so any caller with a valid JWT for the runtime (or none at all) could enumerate OLAP tables, connector schemas, and object storage contents. All seven now require ReadInstance on the requested instance.

• ReadInstance matches AnalyzeConnectors, the sibling endpoint powering the same connector explorer UI, and is held by every legitimate caller: Rill Developer (auth disabled), the Cloud status page (gated on manageProject), cloud editing, and the admin service account.
• ReadOLAP was not used for the OLAP endpoints because it is only granted on editable deployments, which would break the status page's tables tab on prod. ReadObjects was not used for the object store endpoints because it is part of every viewer's base grant and would not restrict access.
• Because permissions are resolved for the requested instance_id, the check also prevents using a JWT issued for one instance against another instance on the same runtime.

Checklist:

• Covered by tests
• Ran it and it works as intended
• Reviewed the diff before requesting a review
• Checked for unhandled edge cases
• Linked the issues it closes
• Checked if the docs need to be updated. If so, create a separate Linear DOCS issue
• Intend to cherry-pick into the release branch
• I'm proud of this work!

[nishantmonu51]

@codex: review

[chatgpt-codex-connector]

Codex Review: Didn't find any major issues. Keep them coming!

Reviewed commit: 840c115bfa

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".