fix(cli): let group admins resolve group names

[jgpruitt]

Summary

• resolve single group names through member-accessible principal.resolve
• preserve admin-only group enumeration for bulk invitation resolution
• cover group-admin name-based membership management in unit and e2e tests

Testing

• ./bun test packages/cli/commands/group.test.ts
• ./bun run check
• ./bun run check:full

[Copilot]

Pull request overview

This PR updates the CLI’s group-name resolution path so group admins (and other non-space-admin members) can target a group by name via the member-accessible principal.resolve, while preserving admin-only bulk group enumeration for invitation flows.

Changes:

• Switch me group single-group name resolution from group.list (admin-only) to principal.resolve (member-accessible) via resolveSpacePrincipalId.
• Add a focused unit test for resolveGroupId to ensure UUID short-circuiting and that group.list is not called.
• Add an e2e regression test verifying a group admin can manage membership by group name without gaining group list access.

Reviewed changes

Copilot reviewed 3 out of 3 changed files in this pull request and generated no comments.

File	Description
packages/cli/commands/group.ts	Routes single group-name resolution through principal.resolve to enable non-space-admin group admins to manage groups by name.
packages/cli/commands/group.test.ts	Unit coverage for the new resolveGroupId behavior (uses principal.resolve, skips network for UUIDs).
e2e/cli.e2e.test.ts	E2E coverage ensuring group admins can manage group membership by name while group list remains space-admin-only.

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.