fix(studio): enforce runtime visibility by role

[evanlowe]

Summary

• show all runtimes to administrators while preserving owner-only visibility for developers and regular users
• mark administrator-owned runtimes with the existing “我创建的” badge
• hide deployment controls from regular users and scope runtime caches by granted visibility
• add frontend and RBAC regression coverage and refresh the bundled Studio assets

Testing

• npm test (292 passed)
• npm run build
• uv run pytest tests/cli/test_studio_rbac.py -q (18 passed)
• uv run ruff check tests/cli/test_studio_rbac.py
• uv run pyright tests/cli/test_studio_rbac.py
• uv run pre-commit run --all-files

The production build completed with the existing dynamic-import and chunk-size warnings.