feat(projects): When adding members check all memberships

Signed-off-by: Javier Rodriguez <javier@chainloop.dev>

Author: javirln

app/controlplane/pkg/data/project.go

@@ -337,7 +337,11 @@ func (r *ProjectRepo) queryMembership(orgID uuid.UUID, projectID uuid.UUID, memb
 			membership.MemberID(memberID),
 			membership.ResourceTypeEQ(authz.ResourceTypeProject),
 			membership.ResourceID(projectID),
-			membership.ParentIDIsNil(), // Only top-level memberships
+			// include both direct (parent nil) and indirect (parent not nil) memberships
+			membership.Or(
+				membership.ParentIDIsNil(),
+				membership.ParentIDNotNil(),
+			),
 		).WithOrganization()
 }