fix(plugin-security): the app default permission set resolves from the first level that NAMES one (#15298) - #15311

fix(plugin-security): the app default permission set resolves from the first level that NAMES one (#15298)#15311

hotlong merged 5 commits into

mainobjectstack-ai/objectstack:mainfrom

claude/issue-15298-declared-permission-sets-docblockobjectstack-ai/objectstack:claude/issue-15298-declared-permission-sets-docblockCopy head branch name to clipboard