test(workspaces): prove v2 member management in-process against PostgreSQL

Replace the running-app E2E script with an integration suite that drives
the real v2 member route handlers with hashed personal keys, a workspace
key, and OAuth tokens against PostgreSQL, including a SCIM-managed member.

Simplify the store-failure mapping with findCause and a status table, and
keep the store's HTTP error as the cause of a coded refusal so the internal
permissions route renders it exactly as before. Spread params and body in
the PATCH route like the organization member route, trim comments, and
list the renamed member commands in the Teammates settings section.

Author: waleedlatif1

apps/sim/app/api/v2/workspaces/[workspaceId]/members/[userId]/route.ts

@@ -19,11 +19,7 @@ export const PATCH = defineV2JsonRoute({
   auth: v2ApiKeyAuth,
   rateLimit: v2RateLimits.publicApi,
   errorPolicy: v2WorkspaceErrorPolicies.manageWorkspaceMembers,
-  mapInput: ({ params, body }) => ({
-    workspaceId: params.workspaceId,
-    userId: params.userId,
-    role: body.role,
-  }),
+  mapInput: ({ params, body }) => ({ ...params, ...body }),
   useCase: updateWorkspaceMember,
   present: ({ member }) => ({ data: presentWorkspaceMember(member) }),
 })

apps/sim/lib/settings/sections.ts

@@ -112,7 +112,12 @@ export const settingsSections: Record<MothershipSettingsScope, readonly Settings
       id: 'teammates',
       label: 'Teammates',
       uiSection: 'teammates',
-      cli: ['workspaces members', 'workspaces invitations create'],
+      cli: [
+        'workspaces members list',
+        'workspaces members update',
+        'workspaces members remove',
+        'workspaces invitations create',
+      ],
     },
     {
       id: 'secrets',