Add grants support for AI Gateway securables (model_service, mcp_service, model_provider_service)

[alex-khakhlyuk]

…ice, model_provider_service)

Follow-up to the #6410 split. Wires UC grants (the grants field + .grants sub-resource) into all three AI Gateway securables, mirroring volumes/registered_models: the Grants field on each resource config, the resource->securable_type mapping (model_service/mcp_service/ model_provider_service), and the direct-engine grants sub-resource registration. Stacked on the model_provider_service branch.

Changes

Why

Tests

[github-actions]

Approval status: pending

/acceptance/bundle/ - needs approval

28 files changed
Suggested: @janniklasrose
Also eligible: @denik, @pietern, @andrewnester, @shreyas-goenka, @anton-107, @lennartkats-db

/bundle/ - needs approval

9 files changed
Suggested: @janniklasrose
Also eligible: @denik, @pietern, @andrewnester, @shreyas-goenka, @anton-107, @lennartkats-db

General files (require maintainer)

17 files changed
Based on git history:

• @janniklasrose -- recent work in bundle/internal/validation/generated/, bundle/schema/, bundle/direct/dresources/

_{Any maintainer (@andrewnester, @anton-107, @denik, @pietern, @shreyas-goenka, @simonfaltum, @renaudhartert-db, @janniklasrose, @lennartkats-db, @rugpanov, @rclarey) can approve all areas.
See OWNERS for ownership rules.}

[eng-dev-ecosystem-bot]

Integration test report

Commit: 6978ed4

Run: 34608827908

	Env	❌​FAIL	🟨​KNOWN	🔄​flaky	✅​pass	🙈​skip	Time
❌​	aws linux	2	1		280	393	9:35
❌​	aws windows	2	1	1	281	391	8:25
❌​	azure linux	2	1	6	273	393	14:59
❌​	azure windows	2	1		281	391	9:41
❌​	gcp linux	2	1		280	393	10:44
❌​	gcp windows	2	1		282	391	9:29

10 interesting tests: 7 flaky, 2 FAIL, 1 KNOWN

	Test Name	aws linux	aws windows	azure linux	azure windows	gcp linux	gcp windows
🟨​	TestAccept	🟨​K	🟨​K	🟨​K	🟨​K	🟨​K	🟨​K
❌​	TestAccept/bundle/resources/model_provider_services/lifecycle	❌​F	❌​F	❌​F	❌​F	❌​F	❌​F
🔄​	TestAccept/bundle/resources/model_provider_services/lifecycle/DATABRICKS_BUNDLE_ENGINE=direct/DMS=	✅​p	✅​p	🔄​f	✅​p	✅​p	✅​p
❌​	TestAccept/bundle/resources/model_provider_services/lifecycle/DATABRICKS_BUNDLE_ENGINE=direct/DMS=true	❌​F	❌​F	❌​F	❌​F	❌​F	❌​F
🔄​	TestDashboardAssumptions_WorkspaceImport	✅​p	✅​p	🔄​f	✅​p	✅​p	✅​p
🔄​	TestFsCat	✅​p	✅​p	🔄​f	✅​p	✅​p	✅​p
🔄​	TestFsCat/dbfs	✅​p	✅​p	🔄​f	✅​p	✅​p	✅​p
🔄​	TestFsRmDirRecursively	✅​p	✅​p	🔄​f	✅​p	✅​p	✅​p
🔄​	TestFsRmDirRecursively/dbfs	✅​p	✅​p	🔄​f	✅​p	✅​p	✅​p
🔄​	TestSyncFullFileSync	✅​p	🔄​f	✅​p	✅​p	✅​p	✅​p

Top 1 slowest tests (at least 2 minutes):

duration	env	testname
2:15	gcp windows	TestFilerWorkspaceFilesExtensionsReadDir