fix: check role permissions when managing team members

Draft
KE
1d ago
+78-1

Proposed changes (including videos or screenshots)

teams.updateMember and teams.addMembers now validate the roles they accept and check the same role permissions as the other role-assignment paths.

Issue(s)

Steps to test or reproduce

See the new cases under /teams.updateMember in apps/meteor/tests/end-to-end/api/teams.ts.

Further comments