feat(access-control): add per-model denylist to permission groups #4794

Bugbot Review

Bugbot Analysis Progress (6m 23s elapsed)

✅ Gathered PR context (7s)
✅ Completed bug detection (6m 15s)
✅ Posted analysis results (2s)

Final Result: Bugbot completed review - no issues found! ✅

Request ID: serverGenReqId_90f2fb60-0a24-4ff6-bfc4-9e7da3ef531e

✅ Bugbot reviewed your changes and found no new issues!

Comment @cursor review or bugbot run to trigger another review on this PR

^{Reviewed by Cursor Bugbot for commit 60802ea. Configure here.}