feat: organization tuples as contextual checks

[golanglemonade]

This supports new permissions updates: theopenlane/core#2398

adds parent_context for organization level tuples; related to theopenlane/core#2398
setup with a config that allows disbaling for backwards compatibility as well as configuring the skip and conditions via fga client config opts, e.g:

	suite.ofgaTF = fgatest.NewFGATestcontainer(context.Background(),
		fgatest.WithModuleFile(fgaModuleFile),
		fgatest.WithEnvVars(coreutils.GetDefaultFGAEnvs()),
		fgatest.WithVersion(version),
		fgatest.WithSkipParentContextKinds("organization", "user", "system"),
		fgatest.WithParentSkipConditions(fgax.ParentContextConditionConfig{Kind: "group", Name: "public_group", Context: map[string]any{"public": false}}),
	)

or via core config:

authz:
  parentcontextconditions:
    - kind: group
      name: public_group
      context:
        public: false
  parentcontextskipkinds: 
    - organization
    - user
    - system

this is a breaking change but I've allowed it to be configured with backwards compatibly; see the draft PR in core.

[sonarqubecloud]

Quality Gate passed

Issues
2 New issues
0 Accepted issues

Measures
0 Security Hotspots
62.5% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[sonarqubecloud]

Quality Gate passed

Issues
2 New issues
0 Accepted issues

Measures
0 Security Hotspots
43.3% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud