Hide Store and AuthorizationModel resources from user workspaces

[nexus49]

Context

The Store and AuthorizationModel resources are currently exposed via the core.platform-mesh.io APIExport, making them visible in every user workspace. These are internal technical resources that end users should not modify directly.

Goal

Restrict visibility of these resources to organizational workspaces only:

1. Create a new APIExport orgs.core.platform-mesh.io containing Store and AuthorizationModel resources
2. Add this APIExport to the default API bindings for organizational workspaces only
3. Relocate AuthorizationModel generation from provider workspaces to organizational workspaces
   • Ensure naming conventions prevent conflicts across workspaces
4. Update affected components:
   • Adjust generator/operator logic accordingly
   • Update helm-charts default configurations

Acceptance Criteria

• Store and AuthorizationModel resources are no longer visible in user workspaces
• New orgs.core.platform-mesh.io APIExport is created and bound to org workspaces
• AuthorizationModels are generated in org workspaces with conflict-safe naming
• All related operators and helm-charts are updated