feat: add teams resource (dhq teams list|show|create|update|delete)

internal/assist/prompt.go

@@ -143,6 +143,7 @@ dhq beta enroll [--protocol managed_vps|static_hosting]    (enroll the account i
 
 Account Resources:
 dhq agents list|create|update|delete|revoke
+dhq teams list|show|create|update|delete
 dhq folders list|create|update|delete
 dhq global-servers list|show|create|update|delete|copy-to-project
 dhq invoices list                         (billing history; billing-manager key required)

internal/commands/agent_metadata.go

@@ -276,6 +276,29 @@ var commandMetadataTable = map[string]AgentMetadata{
 		Idempotent: true, SupportsJSON: true, SafeForAutomation: true,
 		ResourceTypes: []string{"ssh_key"},
 	},
+
+	// Teams (account-level permission groups)
+	"dhq teams list": {
+		Idempotent: true, SupportsJSON: true, SafeForAutomation: true,
+		ResourceTypes: []string{"team"},
+	},
+	"dhq teams show": {
+		Idempotent: true, SupportsJSON: true, SafeForAutomation: true,
+		ResourceTypes: []string{"team"},
+	},
+	"dhq teams create": {
+		Idempotent: false, SupportsJSON: true, SafeForAutomation: true,
+		ResourceTypes: []string{"team"},
+	},
+	"dhq teams update": {
+		Idempotent: true, SupportsJSON: true, SafeForAutomation: true,
+		ResourceTypes: []string{"team"},
+	},
+	"dhq teams delete": {
+		Destructive: true, RequiresConfirmation: true,
+		Idempotent: false, SupportsJSON: true, SafeForAutomation: true,
+		ResourceTypes: []string{"team"},
+	},
 	"dhq ssh-keys download": {
 		// Emits raw private key material. Idempotent, but sensitive enough that
 		// an agent should confirm before running and not treat it as safe to run

internal/commands/root.go

@@ -185,6 +185,7 @@ Support: support@deployhq.com`,
 		newExcludedFilesCmd(),
 		newIntegrationsCmd(),
 		newAgentsCmd(),
+		newTeamsCmd(),
 		newSSHKeysCmd(),
 		newUsersCmd(),
 		newAccountCmd(),