fix(crm): owner-scope deal search so Cedar never links an opp it cannot write

CedarCopilot wants to merge 5 commits into staging from fix/sherlock-crm-link-owner-scope-20260827-180115